Corsair---DLL-Planting-CVE-2023-38822

Corsair —— DLL 种植漏洞 CVE-2023-38822 Corsair iCUE v.5.3.102 中的 DLL 种植漏洞（CVE-2023-38822） 发现者：Idan Malihi 描述 Corsair iCUE v.5.3.102 中的一个问题允许本地攻击者通过 MPDC.dll、CRYPTSP.dll、dcomp.dll、profapi.dll 和 MSASN1.dll 组件执行任意代码。 复现步骤 要利用 DLL 种植漏洞，攻击者应执行以下步骤： 1. 下载 iCUE 的最新版本。 2. 安装 iCUE 产品。 3. 打开安装路径文件夹，例如 C:\Progr...

CVE-2026-89629

In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Check size of status and firmware events before reading them Malformed status and firmware events could cause an out-of-bounds read since the size wasn't being checked. Check the size and warn on unexpected...

iCUE_DllHijack_LPE-CVE-2024-22002

脆弱なソフトウェアとバージョン ソフトウェアダウンロードリンク: CORSAIR iCUE v5.9.105（iCUE Murals対応） 説明 iCUE v5.9.105において、DLLハイジャックの脆弱性が確認されました。この脆弱性は、"iCUEUpdateService"サービスによって管理される更新プロセス中に発生します。このサービスは、"NT...

CVE-2026-89629

A flaw was found in the Linux kernel, specifically within the corsair-void driver for Human Interface Devices HID. This vulnerability allows an attacker to cause an out-of-bounds read by sending malformed status and firmware events. The system fails to properly check the size of these events, whi...

Linux Distros Unpatched Vulnerability : CVE-2026-89629

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: corsair-void: Check size of status and firmware events before reading them Malformed status and firmware events could cause an out-of-bounds read since the...

CVE-2026-89629

In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Check size of status and firmware events before reading them Malformed status and firmware events could cause an out-of-bounds read since the size wasn't being checked. Check the size and warn on unexpected...

CVE-2026-89629 HID: corsair-void: Check size of status and firmware events before reading them

In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Check size of status and firmware events before reading them Malformed status and firmware events could cause an out-of-bounds read since the size wasn't being checked. Check the size and warn on unexpected...

CVE-2026-89629 HID: corsair-void: Check size of status and firmware events before reading them

In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Check size of status and firmware events before reading them Malformed status and firmware events could cause an out-of-bounds read since the size wasn't being checked. Check the size and warn on unexpected...

EUVD-2026-76541

In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Check size of status and firmware events before reading them Malformed status and firmware events could cause an out-of-bounds read since the size wasn't being checked. Check the size and warn on unexpected...

CVE-2026-89629

CVE-2026-89629 affects the Linux kernel in the HID corsair-void driver . The root cause is an out-of-bounds read triggered by malformed status and firmware events whose size was not validated before being read. The fix adds a size check and emits a warning on unexpected values to prevent the read...

PT-2026-90345

In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Check size of status and firmware events before reading them Malformed status and firmware events could cause an out-of-bounds read since the size wasn't being checked. Check the size and warn on unexpected...

SUSE CVE-2026-68360

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

SUSE CVE-2026-68361

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-psu Stop device IO before calling hidhwstop hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of hiddeviceiostart withi...

CVE-2026-68360

A flaw was found in the Linux kernel's hwmon: corsair-cpro driver. A race condition can occur during the driver's initialization process if device input/output IO is started but then fails. This timing issue can lead to a use-after-free UAF vulnerability, where the system attempts to access memor...

CVE-2026-68361

A flaw was found in the Linux kernel's hwmon corsair-psu module. A race condition exists where the hidhwstop function fails to stop device input/output I/O operations before memory is deallocated. This can occur during the corsairpsuprobe failure path, allowing the hidinputreport function to acce...

CVE-2026-68360

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

CVE-2026-68361

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-psu Stop device IO before calling hidhwstop hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of hiddeviceiostart withi...

UBUNTU-CVE-2026-68361

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-psu Stop device IO before calling hidhwstop hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of hiddeviceiostart withi...

UBUNTU-CVE-2026-68360

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

CVE-2026-68361

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-psu Stop device IO before calling hidhwstop hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of hiddeviceiostart withi...