{"id":"CVE-2026-68358","summary":"hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop\n\nCalling hid_hw_stop() does not stop the device IO.\nThis results in a race condition between hid_input_report() and the point\nimmediately following the execution of hid_device_io_start() within\nthe driver probe function. If the probe operation fails after \"io start\"\nhas been initiated, this race condition will result in a UAF vulnerability.\n\nFix the problem by calling hid_device_io_stop() before calling\nhid_hw_stop().","modified":"2026-08-12T04:19:22.756565536Z","published":"2026-08-10T12:03:35.247Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68358.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/305c23993e43db9a3681978691b1f9f2a1b26299"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8cb282c34d582afcca7b1bae7c7bcd5204fd03d6"},{"type":"WEB","url":"https://git.kernel.org/stable/c/dc73b0dfeab8dc0fe73e29c4401d032279e23efd"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f151d0143ac4e086f92f52328ebdbdc50933d8ef"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68358.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68358"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"f3b4b146eb107bda47ee4a8b0927699f962e8a2f"},{"fixed":"8cb282c34d582afcca7b1bae7c7bcd5204fd03d6"},{"fixed":"305c23993e43db9a3681978691b1f9f2a1b26299"},{"fixed":"dc73b0dfeab8dc0fe73e29c4401d032279e23efd"},{"fixed":"f151d0143ac4e086f92f52328ebdbdc50933d8ef"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68358.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.9.0"},{"fixed":"6.12.101"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.42"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.6"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68358.json"}}],"schema_version":"1.9.0"}