CVE-2026-93188

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists where the kone keep values up to date() and kone profile activated() functions use an 8-bit profile value supplied by a device as an index for the 5-element kone->profiles[] array without performing a range check. A malicious USB device posing as a Roccat Kone can trigger a switch-profile event or a startup profile read during probe with an out-of-range value, causing the driver to read out of bounds. The resulting data is then exposed through the actual dpi sysfs attribute. This was identified as a slab-out-of-bounds read, which occurs when a program reads memory outside the boundaries of a slab cache allocation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.