Home

Description

In the Linux kernel, the following vulnerability has been resolved: HID: roccat: fix use-after-free in roccat_report_event roccat_report_event() iterates over the device->readers list without holding the readers_lock. This allows a concurrent roccat_release() to remove and free a reader while it's still being accessed, leading to a use-after-free. Protect the readers list traversal with the readers_lock mutex.

PUBLISHED Reserved 2026-05-01 | Published 2026-05-06 | Updated 2026-05-08 | Assigner Linux




HIGH: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Product status

Default status
unaffected

206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378 (git) before e6a445513fbc6a0329d2d5ff375b6725750ec5a6
affected

206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378 (git) before e16a6d11bd77b81632165f02cf0d5946df74b3b7
affected

206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378 (git) before 36bb2d0b915014bbdc5044982b31b57b78045b93
affected

206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378 (git) before bca0b595e15450dd66b1153c76c4ef1087ee011b
affected

206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378 (git) before d802d848308b35220f21a8025352f0c0aba15c12
affected

Default status
affected

2.6.35
affected

Any version before 2.6.35
unaffected

6.6.136 (semver)
unaffected

6.12.83 (semver)
unaffected

6.18.24 (semver)
unaffected

6.19.14 (semver)
unaffected

7.0 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/e6a445513fbc6a0329d2d5ff375b6725750ec5a6

git.kernel.org/...c/e16a6d11bd77b81632165f02cf0d5946df74b3b7

git.kernel.org/...c/36bb2d0b915014bbdc5044982b31b57b78045b93

git.kernel.org/...c/bca0b595e15450dd66b1153c76c4ef1087ee011b

git.kernel.org/...c/d802d848308b35220f21a8025352f0c0aba15c12

cve.org (CVE-2026-43111)

nvd.nist.gov (CVE-2026-43111)

Download JSON