CVE-2026-68443
Received Received - Intake

Gigabyte WaterForce hwmon Driver UAF Vulnerability

Publication date: 2026-08-12

Last updated on: 2026-08-12

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop Calling hid_hw_stop() does not stop the device IO. This results in a race condition between hid_input_report() and the point immediately following the execution of hid_device_io_start() within the driver probe function. If the probe operation fails after "io start" has been initiated, this race condition will result in a UAF vulnerability. Fix the problem by calling hid_device_io_stop() before calling hid_hw_stop().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-12
Last Modified
2026-08-12
Generated
2026-08-12
AI Q&A
2026-08-12
EPSS Evaluated
N/A
NVD
CVE-2026-68443
EUVD
EUVD-2026-57051

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a use-after-free (UAF) vulnerability in the Linux kernel's hwmon driver for Gigabyte Waterforce devices. It occurs due to a race condition when the driver fails to properly stop device I/O during probe operations. If probe fails after starting I/O, the system may access freed memory, leading to potential crashes or privilege escalation.

Detection Guidance

This vulnerability is specific to the Linux kernel's hwmon subsystem, particularly the gigabyte_waterforce driver. Detection requires checking kernel logs for related errors or examining the driver's behavior during device probe. Commands like dmesg | grep gigabyte_waterforce or journalctl -k | grep gigabyte_waterforce may help identify issues.

Impact Analysis

This vulnerability could allow attackers to cause system crashes, execute arbitrary code, or escalate privileges on affected Linux systems running the vulnerable Gigabyte Waterforce hwmon driver. Users should update their kernel to a patched version immediately.

Mitigation Strategies

Update your Linux kernel to a patched version that includes the fix for this vulnerability. If you are using a distribution with a supported kernel, apply the latest security updates. Avoid using the affected gigabyte_waterforce driver until the patch is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68443. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart