vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-89629

HID: corsair-void: Check size of status and firmware events before reading them

N/A
Published: September 11, 2026 at 07:45 PM UTC
Updated: October 19, 2026 at 09:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Check size of status and firmware events before reading them Malformed status and firmware events could cause an out-of-bounds read since the size wasn't being checked. Check the size and warn on unexpected values to avoid this.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
6.136ea2a6fd3872e60a4d500b548ad65ed94e459ddd
Vendor states this is fixed in 0329354abba357340ee88452425857f3718b5807 (fixed)
Vendor states this is fixed in 08d8814521885e67b1bdf6a3036ee264e3e58377 (fixed)
Vendor states this is fixed in 79465a30050dad62b3c9e7796368db75dac6fa0d (fixed)
Vendor states this is fixed in 6.13 (unaffected)
Vendor states this is fixed in 6.18.50 (unaffected)
Vendor states this is fixed in 7.2.4 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (3)

Source: cverecord
https://git.kernel.org/stable/c/79465a30050dad62b3c9e7796368db75dac6fa0d
Source: cverecord
https://git.kernel.org/stable/c/0329354abba357340ee88452425857f3718b5807
Source: cverecord
https://git.kernel.org/stable/c/08d8814521885e67b1bdf6a3036ee264e3e58377

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card