-

CVE-2026-89627

HID: roccat: free buffered reports when destroying device

In the Linux kernel, the following vulnerability has been resolved:

HID: roccat: free buffered reports when destroying device

roccat_report_event() duplicates each report with kmemdup() and stores
the allocation in a circular-buffer slot. The allocation is released only
when that slot is reused.

The device destruction paths free struct roccat_device without releasing
reports still stored in cbuf[]. This makes those allocations unreachable
and leaks up to ROCCAT_CBUF_SIZE report buffers per device.

Add a small destructor that frees every buffered report before freeing the
device, and use it in both paths that can destroy a registered device.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378
Version < cebb20b9a29cfc90bf56e54337333084f85a69dd
Status affected
Version 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378
Version < 690da9177e64bcfda2f4c0b5b8465178e4a236d8
Status affected
Version 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378
Version < b3cc411daa50b39ba5706492a80a5a0804d9c85f
Status affected
Version 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378
Version < 4cb3ff31d237ad1f515455c497ef07d7172d912b
Status affected
Version 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378
Version < 943b8dc2c6044c01e36395f51bb809a4b6bdfd22
Status affected
Version 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378
Version < da00eac19feef209c9591e48c860afc2014603be
Status affected
Version 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378
Version < fbb5a60f5c31b5625f0d89a79912fbcb2559289b
Status affected
Version 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378
Version < bbff0ccbff360a5498075525005f6a913239a3d7
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.35
Status affected
Version 0
Version < 2.6.35
Status unaffected
Version <= 5.10.*
Version 5.10.270
Status unaffected
Version <= 5.15.*
Version 5.15.221
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.109
Status unaffected
Version <= 6.18.*
Version 6.18.50
Status unaffected
Version <= 7.2.*
Version 7.2.4
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.1
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/943b8dc2c6044c01e36395f51bb809a4b6bdfd22
https://git.kernel.org/stable/c/da00eac19feef209c9591e48c860afc2014603be
https://git.kernel.org/stable/c/fbb5a60f5c31b5625f0d89a79912fbcb2559289b
https://git.kernel.org/stable/c/bbff0ccbff360a5498075525005f6a913239a3d7
https://git.kernel.org/stable/c/4cb3ff31d237ad1f515455c497ef07d7172d912b
https://git.kernel.org/stable/c/690da9177e64bcfda2f4c0b5b8465178e4a236d8
https://git.kernel.org/stable/c/b3cc411daa50b39ba5706492a80a5a0804d9c85f
https://git.kernel.org/stable/c/cebb20b9a29cfc90bf56e54337333084f85a69dd