Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-21797

HID: corsair-void: Add missing delayed work cancel for headset status

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Add missing delayed work cancel for headset status The cancel_delayed_work_sync() call was missed, causing a use-after-free in corsair_void_remove().

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6ea2a6fd3872e60a4d500b548ad65ed94e459ddd to < 2dcb56a0a4da6946f6c18288da595c13e0d2af86affected
  • 6ea2a6fd3872e60a4d500b548ad65ed94e459ddd to < 48e487b002891eb0aeaec704c9bed51f028deff1affected

Linux Linux

Default version status: affected

  • 6.13affected
  • 0 to < 6.13unaffected
  • 6.13.4 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References