CVE-2026-68358
Received Received - Intake

hwmon: UAF in NZXT Kraken3 Driver

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop Calling hid_hw_stop() does not stop the device IO. This results in a race condition between hid_input_report() and the point immediately following the execution of hid_device_io_start() within the driver probe function. If the probe operation fails after "io start" has been initiated, this race condition will result in a UAF vulnerability. Fix the problem by calling hid_device_io_stop() before calling hid_hw_stop().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68358
EUVD
EUVD-2026-55459

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a use-after-free (UAF) vulnerability in the Linux kernel's hwmon driver for NZXT Kraken3 liquid cooling devices. It occurs due to a race condition between device IO and driver probe operations. When the probe fails after starting device IO, the driver calls hid_hw_stop() without properly stopping IO first, leading to a UAF condition.

Detection Guidance

This vulnerability is specific to the Linux kernel's hwmon driver for NZXT Kraken3 devices. Detection requires checking the kernel version and whether the vulnerable driver is loaded. Use commands like 'uname -r' to check kernel version and 'lsmod | grep nzxt_kraken3' to see if the driver is loaded.

Impact Analysis

This vulnerability could allow an attacker to cause system instability, crashes, or potentially execute arbitrary code with kernel privileges. It may lead to denial-of-service conditions or unauthorized access to sensitive system resources.

Mitigation Strategies

Update your Linux kernel to a version that includes the fix for this vulnerability. If you cannot update immediately, consider disabling the nzxt-kraken3 driver module by blacklisting it using 'echo "blacklist nzxt_kraken3" >> /etc/modprobe.d/blacklist.conf' followed by 'update-initramfs -u'.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68358. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart