CVE-2026-89627: HID: roccat: free buffered reports when destroying device
HID: roccat: free buffered reports when destroying device
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.157.1-1
Event History
Frequently Asked Questions
What systems are exposed to this leak?
Systems using the Linux kernel's ROCCAT HID device support are exposed when registered ROCCAT devices receive buffered reports and are later destroyed. The leak is limited to report buffers retained in the driver's circular buffer at device teardown.
Does exploitation require an attacker to send specially crafted reports?
The provided information identifies a resource leak caused by normal report duplication and device destruction. It does not state that malformed or specially crafted reports are required.
What is the impact if the issue is triggered repeatedly?
Each affected device destruction can leave up to ROCCAT_CBUF_SIZE report-buffer allocations unreachable. Repeated device lifecycle events could therefore accumulate unreleased kernel memory.
What should be done if an update cannot be applied immediately?
The provided information does not specify a workaround. Reducing unnecessary connection, disconnection, or destruction of affected ROCCAT devices may limit opportunities for the leak to accumulate.