Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-43111

HID: roccat: fix use-after-free in roccat_report_event

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: HID: roccat: fix use-after-free in roccat_report_event roccat_report_event() iterates over the device->readers list without holding the readers_lock. This allows a concurrent roccat_release() to remove and free a reader while it's still being accessed, leading to a use-after-free. Protect the readers list traversal with the readers_lock mutex.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378 to < 20dca865460f7943cf70afca274b60dac371f546affected
  • 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378 to < 441689e3103694caa3e2d62b7d57c7bccefa5e37affected
  • 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378 to < 181ea51ab0f6370842c5b49cfb86824253a1189eaffected
  • 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378 to < e6a445513fbc6a0329d2d5ff375b6725750ec5a6affected
  • 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378 to < e16a6d11bd77b81632165f02cf0d5946df74b3b7affected
  • 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378 to < 36bb2d0b915014bbdc5044982b31b57b78045b93affected
  • 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378 to < bca0b595e15450dd66b1153c76c4ef1087ee011baffected
  • 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378 to < d802d848308b35220f21a8025352f0c0aba15c12affected

Linux Linux

Default version status: affected

  • 2.6.35affected
  • 0 to < 2.6.35unaffected
  • 5.10.258 to ≤ 5.10.*unaffected
  • 5.15.209 to ≤ 5.15.*unaffected
  • 6.1.175 to ≤ 6.1.*unaffected
  • 6.6.136 to ≤ 6.6.*unaffected
  • 6.12.83 to ≤ 6.12.*unaffected
  • 6.18.24 to ≤ 6.18.*unaffected
  • 6.19.14 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References