CVE-2026-89629

A flaw was found in the Linux kernel, specifically within the corsair-void driver for Human Interface Devices HID. This vulnerability allows an attacker to cause an out-of-bounds read by sending malformed status and firmware events. The system fails to properly check the size of these events, whi...

Linux Distros Unpatched Vulnerability : CVE-2026-89622

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes mcpi2csmbusread stores the caller- supplied buffer pointer in mcp-rxbuf for the duration of a...

Linux Distros Unpatched Vulnerability : CVE-2026-89619

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: intel-thc-hid: intel-quickspi: bound GETREPORT response to the caller buffer quickspihidrawrequest receives the caller's buffer length in len, but...

Linux Distros Unpatched Vulnerability : CVE-2026-89729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: sensor-hub: Fix out-of-bounds write in sensorhubgetfeature sensorhubgetfeature clamps its return value to the caller's buffer size, but the copy loop still...

Linux Distros Unpatched Vulnerability : CVE-2026-89623

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: mcp2221: stop device IO before hidhwstop Quiesce device IO at the start of the devm cleanup callback mcp2221hidunregister so that incoming HID reports cann...

Linux Distros Unpatched Vulnerability : CVE-2026-89621

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: mcp2221: validate report size in mcp2221rawevent mcp2221rawevent never validates the size of incoming HID reports. In the MCP2221I2CGETDATA path it trusts...

Linux Distros Unpatched Vulnerability : CVE-2026-89626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: sensor: custom: Fix field sysfs group cleanup on failure hidsensorcustomaddattributes creates one sysfs group for each custom sensor field. If...

Linux Distros Unpatched Vulnerability : CVE-2026-89625

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: sony: fix UAF of ghlpoketimer / ghlurb at driver unbind For GHL Guitar Hero Live dongles, sonyprobe arms a periodic timer: ghlmagicpoke the timer callback...

Linux Distros Unpatched Vulnerability : CVE-2026-89624

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: universal-pidff: stop the device when force-feedback init fails universalpidffprobe starts the device with hidhwstart and then, if force-feedback...

Linux Distros Unpatched Vulnerability : CVE-2026-89620

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: intel-thc-hid: intel-quickspi: validate report size before copy writecmdtotxdma builds an output report in qsdev-reportbuf, a heap buffer allocated in...

Linux Distros Unpatched Vulnerability : CVE-2026-89629

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: corsair-void: Check size of status and firmware events before reading them Malformed status and firmware events could cause an out-of-bounds read since the...

Linux Distros Unpatched Vulnerability : CVE-2026-89627

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: roccat: free buffered reports when destroying device roccatreportevent duplicates each report with kmemdup and stores the allocation in a circular-buffer...

CVE-2026-89627

A flaw was found in the Linux kernel's HID Human Interface Device roccat driver. When a roccat device is destroyed, the driver fails to properly free buffered reports, leading to a memory leak. A local attacker could potentially exploit this to exhaust system memory, resulting in a Denial of...

CVE-2026-89621

A flaw was found in the Linux kernel's HID Human Interface Device mcp2221 driver. A malicious USB device can exploit this vulnerability by sending a specially crafted, short HID report with an invalid size. This can cause the system to read past valid memory, leading to the disclosure of sensitiv...

CVE-2026-89619

A flaw was found in the Linux kernel, specifically within the intel-quickspi driver. This vulnerability allows a malicious Human Interface Device HID to send an oversized report, which is then copied into a buffer without proper size validation. This leads to a buffer overflow, a type of memory...

CVE-2026-89625

A flaw was found in the Linux kernel's HID Human Interface Device Sony driver, affecting Guitar Hero Live GHL dongles. A race condition occurs during the driver unbinding process where a periodic timer can be re-armed after the memory it uses has been freed. This Use-After-Free UAF vulnerability...

CVE-2026-89729

A flaw was found in the Linux kernel's Human Interface Device HID sensor-hub driver. A local attacker could exploit this vulnerability by providing a specially crafted HID descriptor. This malicious descriptor could cause the sensorhubgetfeature function to write data beyond the intended memory...

CVE-2026-89628

A flaw was found in the Human Interface Device HID picolcd driver in the Linux kernel. A local attacker with root privileges, by using a specially crafted or spoofed picoLCD device, could exploit an out-of-bounds read vulnerability in the picolcddebugeepromread function. This flaw occurs because...

CVE-2026-89626

A flaw was found in the Linux kernel's Human Interface Device HID sensor custom driver. When creating sysfs groups for custom sensor fields, the hidsensorcustomaddattributes function fails to properly clean up previously created groups if an error occurs. This improper resource management could...

CVE-2026-89620

A flaw was found in the Linux kernel's HID Intel QuickSPI driver. A local attacker can exploit a heap buffer overflow by providing a specially crafted report through a hidraw SETREPORT/SETFEATURE ioctl. This allows the attacker to overflow a buffer with controlled length and content, potentially...