CVE-2026-89629

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-89629", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-11T19:38:34.738Z", "datePublished": "2026-09-11T19:45:24.953Z", "dateUpdated": "2026-10-19T08:50:01.489Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T08:50:01.489Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: corsair-void: Check size of status and firmware events before reading them\n\nMalformed status and firmware events could cause an out-of-bounds read since\nthe size wasn't being checked. Check the size and warn on unexpected values to\navoid this."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/hid/hid-corsair-void.c"], "versions": [{"version": "6ea2a6fd3872e60a4d500b548ad65ed94e459ddd", "lessThan": "79465a30050dad62b3c9e7796368db75dac6fa0d", "status": "affected", "versionType": "git"}, {"version": "6ea2a6fd3872e60a4d500b548ad65ed94e459ddd", "lessThan": "0329354abba357340ee88452425857f3718b5807", "status": "affected", "versionType": "git"}, {"version": "6ea2a6fd3872e60a4d500b548ad65ed94e459ddd", "lessThan": "08d8814521885e67b1bdf6a3036ee264e3e58377", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/hid/hid-corsair-void.c"], "versions": [{"version": "6.13", "status": "affected"}, {"version": "0", "lessThan": "6.13", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.50", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.4", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.13", "versionEndExcluding": "6.18.50"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.13", "versionEndExcluding": "7.2.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.13", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/79465a30050dad62b3c9e7796368db75dac6fa0d"}, {"url": "https://git.kernel.org/stable/c/0329354abba357340ee88452425857f3718b5807"}, {"url": "https://git.kernel.org/stable/c/08d8814521885e67b1bdf6a3036ee264e3e58377"}], "title": "HID: corsair-void: Check size of status and firmware events before reading them", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/hid/hid-corsair-void.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "79465a30050dad62b3c9e7796368db75dac6fa0d", "status": "affected", "version": "6ea2a6fd3872e60a4d500b548ad65ed94e459ddd", "versionType": "git"}, {"lessThan": "0329354abba357340ee88452425857f3718b5807", "status": "affected", "version": "6ea2a6fd3872e60a4d500b548ad65ed94e459ddd", "versionType": "git"}, {"lessThan": "08d8814521885e67b1bdf6a3036ee264e3e58377", "status": "affected", "version": "6ea2a6fd3872e60a4d500b548ad65ed94e459ddd", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/hid/hid-corsair-void.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.13"}, {"lessThan": "6.13", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.50", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.4", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: corsair-void: Check size of status and firmware events before reading them\n\nMalformed status and firmware events could cause an out-of-bounds read since\nthe size wasn't being checked. Check the size and warn on unexpected values to\navoid this."}], "id": "CVE-2026-89629", "lastModified": "2026-10-19T09:17:59.843", "metrics": {}, "published": "2026-09-11T20:19:48.400", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/0329354abba357340ee88452425857f3718b5807"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/08d8814521885e67b1bdf6a3036ee264e3e58377"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/79465a30050dad62b3c9e7796368db75dac6fa0d"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: Linux kernel: Out-of-bounds read in `corsair-void` HID driver via malformed events", "id": "2532529", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2532529"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.3", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H", "status": "draft"}, "cwe": "CWE-125", "details": ["A flaw was found in the Linux kernel, specifically within the `corsair-void` driver for Human Interface Devices (HID). This vulnerability allows an attacker to cause an out-of-bounds read by sending malformed status and firmware events. The system fails to properly check the size of these events, which could lead to the disclosure of sensitive information or system instability."], "name": "CVE-2026-89629", "public_date": "2026-09-11T19:45:24Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-89629\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-89629\nhttps://git.kernel.org/stable/c/0329354abba357340ee88452425857f3718b5807\nhttps://git.kernel.org/stable/c/08d8814521885e67b1bdf6a3036ee264e3e58377\nhttps://git.kernel.org/stable/c/79465a30050dad62b3c9e7796368db75dac6fa0d"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[6ea2a6fd3872e60a4d500b548ad65ed94e459ddd,79465a30050dad62b3c9e7796368db75dac6fa0d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[6ea2a6fd3872e60a4d500b548ad65ed94e459ddd,0329354abba357340ee88452425857f3718b5807)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[6ea2a6fd3872e60a4d500b548ad65ed94e459ddd,08d8814521885e67b1bdf6a3036ee264e3e58377)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.13"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.13)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.50,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.4,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-09-12T09:15:12.757499+00:00", "updated": "2026-09-15T21:15:14.622495+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}