CVE-2026-89629

Received Received - Intake

Out-of-Bounds Read in Corsair Void Linux Kernel Driver

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Check size of status and firmware events before reading them Malformed status and firmware events could cause an out-of-bounds read since the size wasn't being checked. Check the size and warn on unexpected values to avoid this.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-11

Generated

2026-10-02

AI Q&A

2026-09-12

EPSS Evaluated

2026-10-01

NVD

CVE-2026-89629

EUVD

EUVD-2026-76541

Affected Vendors & Products

Vendor	Product	Version / Range
corsair	void	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's HID driver for Corsair Void devices. It involves a lack of size validation for status and firmware events. Malformed events could lead to an out-of-bounds read, potentially exposing sensitive memory or causing system instability.

Detection Guidance

This vulnerability is specific to the Linux kernel's HID driver for Corsair Void devices. Detection requires checking kernel logs for related errors or examining the driver code for unchecked event sizes. No direct network detection commands are applicable.

Impact Analysis

An attacker could exploit this to read unauthorized memory, crash the system, or gain elevated privileges. Users of Corsair Void devices on Linux systems are primarily affected if malicious input is processed.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It involves an out-of-bounds read in the Linux kernel's HID driver for Corsair Void devices due to unchecked event sizes. No evidence suggests data exposure or privacy risks that would impact regulatory compliance.

Mitigation Strategies

Update your Linux kernel to the latest patched version. If using a Corsair Void device, ensure the hid-corsair-void driver is updated. Monitor kernel logs for HID-related errors after updates.

Hi! I’m here to help you understand CVE-2026-89629. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70