CVE-2026-68360
In the Linux kernel, the following vulnerability has been resolved:
hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop
Calling hid_hw_stop() does not stop the device IO.
This results in a race condition between hid_input_report() and the point
immediately following the execution of hid_device_io_start() within
the driver probe function. If the probe operation fails after "io start"
has been initiated, this race condition will result in a UAF vulnerability.
Fix the problem by calling hid_device_io_stop() before calling
hid_hw_stop().
CSIRTS triage
- What
- HID device I/O not stopped before hardware shutdown in Corsair CPRO driver causing use-after-free.
- Who is affected
- Systems running affected Linux kernel versions with Corsair CPRO cooler hardware connected.
- Urgency
- Critical severity (CVSS 9.8) but no evidence of active exploitation; patch promptly.
- Action
- Apply Linux kernel security patch for CVE-2026-68360 or update to patched kernel version.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2026-68360
Get an email if CVE-2026-68360 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Low exploitation risk0.22% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 13% of all EPSS-scored CVEs.
Advisory coverage (2)
- criticalCVE-2026-68360: hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stopmsrc · 2026-08-11
- unknownCVE-2026-68360: In the Linux kernel, the following vulnerability has been resolved: hwmon: (corsair-cpro) Stop…nvd · 2026-08-10
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2026-68360)