← CVE Intelligence

CVE-2026-89629

HID: corsair-void: Check size of status and firmware events before reading them PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Check size of status and firmware events before reading them Malformed status and firmware events could cause an out-of-bounds read since the size wasn't being checked. Check the size and warn on unexpected values to avoid this.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 6ea2a6fd3872e60a4d500b548ad65ed94e459ddd before 79465a30050dad62b3c9e7796368db75dac6fa0d; affected 6ea2a6fd3872e60a4d500b548ad65ed94e459ddd before 0329354abba357340ee88452425857f3718b5807; affected 6ea2a6fd3872e60a4d500b548ad65ed94e459ddd before 08d8814521885e67b1bdf6a3036ee264e3e58377
Linux / Linuxaffected 6.13; unaffected 0 before 6.13; unaffected 6.18.50 through 6.18.*; unaffected 7.2.4 through 7.2.*; unaffected 7.3 through *

CWE

No CWE identifiers supplied.

References