CVE-2026-43111

HIGH EPSS 1.9%
Published May 6, 20261mo ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
High
Find Similar
Published May 6, 2026 1mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: HID: roccat: fix use-after-free in roccat_report_event roccat_report_event() iterates over the device->readers list without holding the readers_lock. This allows a concurrent roccat_release() to remove and free a reader while it's still being accessed, leading to a use-after-free. Protect the readers list traversal with the readers_lock mutex.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
1.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 11

VendorProductVersionRange
linuxlinux_kernel*≥2.6.35  –  <6.6.136
linuxlinux_kernel*≥6.7  –  <6.12.83
linuxlinux_kernel*≥6.13  –  <6.18.24
linuxlinux_kernel*≥6.19  –  <6.19.14
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any

References 8

  • git.kernel.org https://git.kernel.org/stable/c/181ea51ab0f6370842c5b49cfb86824253a1189e
  • git.kernel.org https://git.kernel.org/stable/c/20dca865460f7943cf70afca274b60dac371f546
  • git.kernel.org https://git.kernel.org/stable/c/36bb2d0b915014bbdc5044982b31b57b78045b93
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/441689e3103694caa3e2d62b7d57c7bccefa5e37
  • git.kernel.org https://git.kernel.org/stable/c/bca0b595e15450dd66b1153c76c4ef1087ee011b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d802d848308b35220f21a8025352f0c0aba15c12
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e16a6d11bd77b81632165f02cf0d5946df74b3b7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e6a445513fbc6a0329d2d5ff375b6725750ec5a6
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/36bb2d0b915014bbdc5044982b31b57b78045b93
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bca0b595e15450dd66b1153c76c4ef1087ee011b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d802d848308b35220f21a8025352f0c0aba15c12
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e16a6d11bd77b81632165f02cf0d5946df74b3b7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e6a445513fbc6a0329d2d5ff375b6725750ec5a6
    Patch