CVE-2026-68361

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the corsair-psu hardware monitoring driver. The issue occurs when the corsairpsu probe() function fails after device IO has been started. Because hid hw stop() does not stop device IO, a race condition can occur between hid input report() and the subsequent memory cleanup. This can lead to a use-after-free (UAF) condition—where the system attempts to access memory that has already been freed—specifically when hidraw report event() attempts to access the list lock of a freed hidraw structure.

Recommendations Call hid device io stop() before calling hid hw stop() to ensure device IO is stopped before the hardware is stopped and memory is freed.