CVE-2026-43111: HID: roccat: fix use-after-free in roccat_report_event
In the Linux kernel, the following vulnerability has been resolved:
HID: roccat: fix use-after-free in roccatreportevent
roccatreportevent() iterates over the device->readers list without holding the readerslock. This allows a concurrent roccatrelease() to remove and free a reader while it's still being accessed, leading to a use-after-free.
Protect the readers list traversal with the readerslock mutex.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In the Linux kernel roccat code, protect the traversal of the device->readers list in roccat_report_event() by holding the readers_lock mutex so that a concurrent roccat_release() cannot remove/free a reader while it is being accessed.
Linux kernel (roccat_report_event / roccat_release) Protect device->readers list traversal with readers_lock mutex = Use readers_lock mutex to guard iteration over device->readers list and coordinate with concurrent roccat_release()
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43111?
CVE-2026-43111 is classified as a high severity vulnerability due to its potential to cause a use-after-free condition leading to arbitrary code execution.
How do I fix CVE-2026-43111?
To fix CVE-2026-43111, update to the latest version of the Linux kernel that includes the patch addressing this vulnerability.
What are the affected versions for CVE-2026-43111?
CVE-2026-43111 affects several versions of the Linux kernel, specifically those from 2.6.35 up to 6.19.x and various 7.0 release candidates.
What components are impacted by CVE-2026-43111?
CVE-2026-43111 specifically impacts the HID (Human Interface Device) subsystem, particularly related to the Roccat input devices.
Is CVE-2026-43111 exploitable remotely?
CVE-2026-43111 is not known to be exploitable remotely, as it typically requires local access to the affected system.