Strix
64.4K

CVE-2026-89627

UnknownEPSS 0.20%

Last modified

CVE-2026-89627 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: HID: roccat: free buffered reports when destroying device roccat_report_event() duplicates each report with kmemdup() and stores the allocation in a circular-buffer slot. The allocation is released only when that slot is reused. The device destruction paths free struct roccat_device without releasing reports still stored in cbuf[]. EPSS estimates a 0.20% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: HID: roccat: free buffered reports when destroying device roccat_report_event() duplicates each report with kmemdup() and stores the allocation in a circular-buffer slot. The allocation is released only when that slot is reused. The device destruction paths free struct roccat_device without releasing reports still stored in cbuf[]. This makes those allocations unreachable and leaks up to ROCCAT_CBUF_SIZE report buffers per device. Add a small destructor that frees every buffered report before freeing the device, and use it in both paths that can destroy a registered device.

Metrics

EPSS Probability
0.20%

9.9th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378, < cebb20b9a29cfc90bf56e54337333084f85a69dd; >= 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378, < 690da9177e64bcfda2f4c0b5b8465178e4a236d8; >= 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378, < b3cc411daa50b39ba5706492a80a5a0804d9c85f; >= 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378, < 4cb3ff31d237ad1f515455c497ef07d7172d912b; >= 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378, < 943b8dc2c6044c01e36395f51bb809a4b6bdfd22; >= 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378, < da00eac19feef209c9591e48c860afc2014603be; >= 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378, < fbb5a60f5c31b5625f0d89a79912fbcb2559289b; >= 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378, < bbff0ccbff360a5498075525005f6a913239a3d7
LinuxLinux2.6.35

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-89627?
In the Linux kernel, the following vulnerability has been resolved: HID: roccat: free buffered reports when destroying device roccat_report_event() duplicates each report with kmemdup() and stores the allocation in a circular-buffer slot. The allocation is released only when that slot is reused. The device destruction paths free struct roccat_device without releasing reports still stored in cbuf[]. This makes those allocations unreachable and leaks up to ROCCAT_CBUF_SIZE report buffers per device. Add a small destructor that frees every buffered report before freeing the device, and use it in both paths that can destroy a registered device.
How severe is CVE-2026-89627?
Severity scoring for CVE-2026-89627 is pending analysis. The EPSS model estimates a 0.20% probability of exploitation in the next 30 days.
How do I fix CVE-2026-89627?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-89627?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST