In the Linux kernel, the following vulnerability has been resolved:
HID: roccat: fix use-after-free in roccatreportevent
roccatreportevent() iterates over the device->readers list without holding the readerslock. This allows a concurrent roccatrelease() to remove and free a reader while it's still being accessed, leading to a use-after-free.
Protect the readers list traversal with the readerslock mutex.