Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-89629

HID: corsair-void: Check size of status and firmware events before reading them

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Check size of status and firmware events before reading them Malformed status and firmware events could cause an out-of-bounds read since the size wasn't being checked. Check the size and warn on unexpected values to avoid this.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6ea2a6fd3872e60a4d500b548ad65ed94e459ddd to < 79465a30050dad62b3c9e7796368db75dac6fa0daffected
  • 6ea2a6fd3872e60a4d500b548ad65ed94e459ddd to < 0329354abba357340ee88452425857f3718b5807affected
  • 6ea2a6fd3872e60a4d500b548ad65ed94e459ddd to < 08d8814521885e67b1bdf6a3036ee264e3e58377affected

Linux Linux

Default version status: affected

  • 6.13affected
  • 0 to < 6.13unaffected
  • 6.18.50 to ≤ 6.18.*unaffected
  • 7.2.4 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References