CVE-2026-43111

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-43111
In the Linux kernel, the following vulnerability has been resolved: HID: roccat: fix use-after-free in roccat_report_event roccat_report_event() iterates over the device->readers list without holding the readers_lock. This allows a concurrent roccat_release() to remove and free a reader while it's still being accessed, leading to a use-after-free. Protect the readers list traversal with the readers_lock mutex.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/181ea51ab0f6370842c5b49cfb86824253a1189e
https://git.kernel.org/stable/c/20dca865460f7943cf70afca274b60dac371f546
https://git.kernel.org/stable/c/36bb2d0b915014bbdc5044982b31b57b78045b93 Patch
https://git.kernel.org/stable/c/441689e3103694caa3e2d62b7d57c7bccefa5e37
https://git.kernel.org/stable/c/bca0b595e15450dd66b1153c76c4ef1087ee011b Patch
https://git.kernel.org/stable/c/d802d848308b35220f21a8025352f0c0aba15c12 Patch
https://git.kernel.org/stable/c/e16a6d11bd77b81632165f02cf0d5946df74b3b7 Patch
https://git.kernel.org/stable/c/e6a445513fbc6a0329d2d5ff375b6725750ec5a6 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
History

01 Jun 2026, 17:17

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/181ea51ab0f6370842c5b49cfb86824253a1189e -
  • () https://git.kernel.org/stable/c/20dca865460f7943cf70afca274b60dac371f546 -
  • () https://git.kernel.org/stable/c/441689e3103694caa3e2d62b7d57c7bccefa5e37 -

08 May 2026, 19:45

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/36bb2d0b915014bbdc5044982b31b57b78045b93 - () https://git.kernel.org/stable/c/36bb2d0b915014bbdc5044982b31b57b78045b93 - Patch
References () https://git.kernel.org/stable/c/bca0b595e15450dd66b1153c76c4ef1087ee011b - () https://git.kernel.org/stable/c/bca0b595e15450dd66b1153c76c4ef1087ee011b - Patch
References () https://git.kernel.org/stable/c/d802d848308b35220f21a8025352f0c0aba15c12 - () https://git.kernel.org/stable/c/d802d848308b35220f21a8025352f0c0aba15c12 - Patch
References () https://git.kernel.org/stable/c/e16a6d11bd77b81632165f02cf0d5946df74b3b7 - () https://git.kernel.org/stable/c/e16a6d11bd77b81632165f02cf0d5946df74b3b7 - Patch
References () https://git.kernel.org/stable/c/e6a445513fbc6a0329d2d5ff375b6725750ec5a6 - () https://git.kernel.org/stable/c/e6a445513fbc6a0329d2d5ff375b6725750ec5a6 - Patch
CPE cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CWE CWE-416

08 May 2026, 13:16

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

06 May 2026, 10:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-06 10:16

Updated : 2026-06-01 17:17

NVD link : CVE-2026-43111

Mitre link : CVE-2026-43111

CVE.ORG link : CVE-2026-43111

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-416

Use After Free