CVE-2026-68360hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop Calling hid_hw_stop() does not stop the device IO. This results in a race condition between hid_input_report() and the point immediately following the execution of hid_device_io_start() within the driver probe function. If the probe operation fails after "io start" has been initiated, this race condition will result in a UAF vulnerability. Fix the problem by calling hid_device_io_stop() before calling hid_hw_stop().
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 40c3a445422579db8ad96c234dbe6c0ab3f6b936 builds before 3df2b67793babbea7951b5f601d6df891c63b5d8; 40c3a445422579db8ad96c234dbe6c0ab3f6b936 builds before 5e07f292ab5591bf4f588aa7abd22ec86c25d076; 40c3a445422579db8ad96c234dbe6c0ab3f6b936 builds before 6c5f31fdf28455a7fd573bda452c80b7b6700247; from 40c3a445422579db8ad96c234dbe6c0ab3f6b936 before 0975c42ed2a3bf32125a920e5d19194289126210; from 40c3a445422579db8ad96c234dbe6c0ab3f6b936 before c7757db58957ac20cdec6ce575dbd44a6375664e; from 40c3a445422579db8ad96c234dbe6c0ab3f6b936 before 56d2deb6448378118dbe68c4fbb3fbae5f65b18c; 40c3a445422579db8ad96c234dbe6c0ab3f6b936 builds before 1a634f464d6153dfa4d7e73a3d78236b65a64ee9; from 40c3a445422579db8ad96c234dbe6c0ab3f6b936 before 94c87871b051d7ad758828a805215a2ec194512a | CNA record |
References
- https://git.kernel.org/stable/c/3df2b67793babbea7951b5f601d6df891c63b5d8
- https://git.kernel.org/stable/c/5e07f292ab5591bf4f588aa7abd22ec86c25d076
- https://git.kernel.org/stable/c/6c5f31fdf28455a7fd573bda452c80b7b6700247
- https://git.kernel.org/stable/c/0975c42ed2a3bf32125a920e5d19194289126210
- https://git.kernel.org/stable/c/c7757db58957ac20cdec6ce575dbd44a6375664e
- https://git.kernel.org/stable/c/56d2deb6448378118dbe68c4fbb3fbae5f65b18c
- https://git.kernel.org/stable/c/1a634f464d6153dfa4d7e73a3d78236b65a64ee9
- https://git.kernel.org/stable/c/94c87871b051d7ad758828a805215a2ec194512a
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.