CVE-2026-68360

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the corsair-cpro hardware monitoring (hwmon) component. The issue occurs because calling hid hw stop() does not stop device IO. This creates a race condition between hid input report() and the point immediately following the execution of hid device io start() within the driver probe function. If the probe operation fails after IO start has been initiated, it can lead to a Use-After-Free (UAF) condition, which occurs when a program continues to use a pointer after it has been freed.

Recommendations As a temporary mitigation, restrict the use of the corsair-cpro driver. At the moment, there is no information about a newer version that contains a fix for this vulnerability.