CVE-2026-97967hwmon: (corsair-cpro) Remove debugfs entries when probe fails
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: hwmon: (corsair-cpro) Remove debugfs entries when probe fails ccp_debugfs_init() registers debugfs files whose private data is the devm allocated ccp. If hwmon_device_register_with_info() fails right after it, ccp_probe() returns without removing them: the HID core then frees ccp, and ccp_remove() is not called for a failed probe, so the files stay behind. Reading one of them dereferences the freed pointer. Remove the debugfs entries on that error path. debugfs_remove_recursive() waits for readers already inside the show callbacks, so ccp is no longer reachable through debugfs by the time probe returns.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 25, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 5997eb60f896830126bc1783465b678b110e2fdd before ae01aafd8214e48cb7eff11e92dfbf3778d52d9d; from 5997eb60f896830126bc1783465b678b110e2fdd before a5de53b08cc319dadce6fb68d33749ea37962952; from 5997eb60f896830126bc1783465b678b110e2fdd before fdc1bc23ff59ee308042342cefcb918d6efba409; 5997eb60f896830126bc1783465b678b110e2fdd builds before 4ee875c423c66c45d7ef7bbff403cd0e3971e0a2 | CNA record |
References
- https://git.kernel.org/stable/c/ae01aafd8214e48cb7eff11e92dfbf3778d52d9d
- https://git.kernel.org/stable/c/a5de53b08cc319dadce6fb68d33749ea37962952
- https://git.kernel.org/stable/c/fdc1bc23ff59ee308042342cefcb918d6efba409
- https://git.kernel.org/stable/c/4ee875c423c66c45d7ef7bbff403cd0e3971e0a2
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.