CVE-2026-43111 (GCVE-0-2026-43111)

Vulnerability from cvelistv5 – Published: 2026-05-06 07:40 – Updated: 2026-08-05 12:25
VLAI
Title
HID: roccat: fix use-after-free in roccat_report_event
Summary
In the Linux kernel, the following vulnerability has been resolved: HID: roccat: fix use-after-free in roccat_report_event roccat_report_event() iterates over the device->readers list without holding the readers_lock. This allows a concurrent roccat_release() to remove and free a reader while it's still being accessed, leading to a use-after-free. Protect the readers list traversal with the readers_lock mutex.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378 , < 20dca865460f7943cf70afca274b60dac371f546 (git)
Affected: 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378 , < 441689e3103694caa3e2d62b7d57c7bccefa5e37 (git)
Affected: 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378 , < 181ea51ab0f6370842c5b49cfb86824253a1189e (git)
Affected: 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378 , < e6a445513fbc6a0329d2d5ff375b6725750ec5a6 (git)
Affected: 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378 , < e16a6d11bd77b81632165f02cf0d5946df74b3b7 (git)
Affected: 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378 , < 36bb2d0b915014bbdc5044982b31b57b78045b93 (git)
Affected: 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378 , < bca0b595e15450dd66b1153c76c4ef1087ee011b (git)
Affected: 206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378 , < d802d848308b35220f21a8025352f0c0aba15c12 (git)
guessed Create a notification for this product.
Linux Linux Affected: 2.6.35
Unaffected: 0 , < 2.6.35 (semver)
Unaffected: 5.10.258 , ≤ 5.10.* (semver)
Unaffected: 5.15.209 , ≤ 5.15.* (semver)
Unaffected: 6.1.175 , ≤ 6.1.* (semver)
Unaffected: 6.6.136 , ≤ 6.6.* (semver)
Unaffected: 6.12.83 , ≤ 6.12.* (semver)
Unaffected: 6.18.24 , ≤ 6.18.* (semver)
Unaffected: 6.19.14 , ≤ 6.19.* (semver)
Unaffected: 7.0 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/hid/hid-roccat.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "20dca865460f7943cf70afca274b60dac371f546",
              "status": "affected",
              "version": "206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378",
              "versionType": "git"
            },
            {
              "lessThan": "441689e3103694caa3e2d62b7d57c7bccefa5e37",
              "status": "affected",
              "version": "206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378",
              "versionType": "git"
            },
            {
              "lessThan": "181ea51ab0f6370842c5b49cfb86824253a1189e",
              "status": "affected",
              "version": "206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378",
              "versionType": "git"
            },
            {
              "lessThan": "e6a445513fbc6a0329d2d5ff375b6725750ec5a6",
              "status": "affected",
              "version": "206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378",
              "versionType": "git"
            },
            {
              "lessThan": "e16a6d11bd77b81632165f02cf0d5946df74b3b7",
              "status": "affected",
              "version": "206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378",
              "versionType": "git"
            },
            {
              "lessThan": "36bb2d0b915014bbdc5044982b31b57b78045b93",
              "status": "affected",
              "version": "206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378",
              "versionType": "git"
            },
            {
              "lessThan": "bca0b595e15450dd66b1153c76c4ef1087ee011b",
              "status": "affected",
              "version": "206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378",
              "versionType": "git"
            },
            {
              "lessThan": "d802d848308b35220f21a8025352f0c0aba15c12",
              "status": "affected",
              "version": "206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/hid/hid-roccat.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.35"
            },
            {
              "lessThan": "2.6.35",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.258",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.175",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.136",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.83",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.24",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.14",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.258",
                  "versionStartIncluding": "2.6.35",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "2.6.35",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.175",
                  "versionStartIncluding": "2.6.35",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.136",
                  "versionStartIncluding": "2.6.35",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.83",
                  "versionStartIncluding": "2.6.35",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.24",
                  "versionStartIncluding": "2.6.35",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.14",
                  "versionStartIncluding": "2.6.35",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "2.6.35",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: roccat: fix use-after-free in roccat_report_event\n\nroccat_report_event() iterates over the device-\u003ereaders list without\nholding the readers_lock. This allows a concurrent roccat_release() to\nremove and free a reader while it\u0027s still being accessed, leading to a\nuse-after-free.\n\nProtect the readers list traversal with the readers_lock mutex."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - Roccat-specific sysfs/HID event paths feed roccat_report_event(), and exploitation of the vulnerable reader-list race requires local control of /dev/roccat* open/release activity on a system with an affected Roccat USB HID device. There is no network or adjacent protocol path.\nAC:L - The bug is a missing readers_lock around list traversal, and an attacker with device-node access can repeatedly open/close readers while generating reports through the Roccat device/sysfs path. The race is attacker-influenced rather than dependent on rare external conditions.\nPR:L - The relevant roccat char-device operations do not perform capability checks, but the attacker needs local DAC/udev access to the Roccat device/sysfs nodes. In a reasonable desktop or workstation deployment this is low-privileged user access, not real init-namespace root.\nUI:N - Once the affected device and driver are present, exploitation does not require a victim to perform an action. The attacker can drive the racing file operations and report generation directly.\nS:U - The vulnerability corrupts kernel memory within the same kernel security authority. It does not cross a VM, IOMMU, or other separate security scope boundary.\nC:H - This is a kernel use-after-free of struct roccat_reader during list traversal, allowing freed heap memory to be dereferenced after attacker-influenced reallocation. Following the required conservative UAF guidance, this can support high confidentiality impact.\nI:H - The stale reader object is not only read but can have cbuf_start updated and its list pointers traversed after free, giving a plausible kernel heap corruption primitive. Following the required conservative UAF guidance, this supports high integrity impact.\nA:H - Even without full exploitation, dereferencing or walking a freed list element can produce a kernel oops, panic, or hang. Repeated triggering can therefore cause high availability impact."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:25:58.562Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/20dca865460f7943cf70afca274b60dac371f546"
        },
        {
          "url": "https://git.kernel.org/stable/c/441689e3103694caa3e2d62b7d57c7bccefa5e37"
        },
        {
          "url": "https://git.kernel.org/stable/c/181ea51ab0f6370842c5b49cfb86824253a1189e"
        },
        {
          "url": "https://git.kernel.org/stable/c/e6a445513fbc6a0329d2d5ff375b6725750ec5a6"
        },
        {
          "url": "https://git.kernel.org/stable/c/e16a6d11bd77b81632165f02cf0d5946df74b3b7"
        },
        {
          "url": "https://git.kernel.org/stable/c/36bb2d0b915014bbdc5044982b31b57b78045b93"
        },
        {
          "url": "https://git.kernel.org/stable/c/bca0b595e15450dd66b1153c76c4ef1087ee011b"
        },
        {
          "url": "https://git.kernel.org/stable/c/d802d848308b35220f21a8025352f0c0aba15c12"
        }
      ],
      "title": "HID: roccat: fix use-after-free in roccat_report_event",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-43111",
    "datePublished": "2026-05-06T07:40:37.916Z",
    "dateReserved": "2026-05-01T14:12:55.986Z",
    "dateUpdated": "2026-08-05T12:25:58.562Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-43111",
      "date": "2026-10-05",
      "epss": "0.00171",
      "percentile": "0.05849"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "drivers/hid/hid-roccat.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "20dca865460f7943cf70afca274b60dac371f546",
                    "status": "affected",
                    "version": "206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "441689e3103694caa3e2d62b7d57c7bccefa5e37",
                    "status": "affected",
                    "version": "206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "181ea51ab0f6370842c5b49cfb86824253a1189e",
                    "status": "affected",
                    "version": "206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "e6a445513fbc6a0329d2d5ff375b6725750ec5a6",
                    "status": "affected",
                    "version": "206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "e16a6d11bd77b81632165f02cf0d5946df74b3b7",
                    "status": "affected",
                    "version": "206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "36bb2d0b915014bbdc5044982b31b57b78045b93",
                    "status": "affected",
                    "version": "206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "bca0b595e15450dd66b1153c76c4ef1087ee011b",
                    "status": "affected",
                    "version": "206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "d802d848308b35220f21a8025352f0c0aba15c12",
                    "status": "affected",
                    "version": "206f5f2fcb5ff5bb0c60f9e9189937f3ca03e378",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "drivers/hid/hid-roccat.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "2.6.35"
                  },
                  {
                    "lessThan": "2.6.35",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.258",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.209",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.175",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.136",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.83",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.24",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.19.*",
                    "status": "unaffected",
                    "version": "6.19.14",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.0",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E870C6A6-0F0A-4202-811D-96F288F882C2",
                    "versionEndExcluding": "6.6.136",
                    "versionStartIncluding": "2.6.35",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7F0AE5B5-23AC-4DCC-B37A-51CA1DAE7BA8",
                    "versionEndExcluding": "6.12.83",
                    "versionStartIncluding": "6.7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8126B8B8-6D0B-4443-86C1-672AEE893555",
                    "versionEndExcluding": "6.18.24",
                    "versionStartIncluding": "6.13",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D6A8A074-BBF4-4803-ABED-519A839435BB",
                    "versionEndExcluding": "6.19.14",
                    "versionStartIncluding": "6.19",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*",
                    "matchCriteriaId": "F253B622-8837-4245-BCE5-A7BF8FC76A16",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*",
                    "matchCriteriaId": "4AE85AD8-4641-4E7C-A2F4-305E2CD9EE64",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*",
                    "matchCriteriaId": "F666C8D8-6538-46D4-B318-87610DE64C34",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*",
                    "matchCriteriaId": "02259FDA-961B-47BC-AE7F-93D7EC6E90C2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*",
                    "matchCriteriaId": "58A9FEFF-C040-420D-8F0A-BFDAAA1DF258",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*",
                    "matchCriteriaId": "1D2315C0-D46F-4F85-9754-F9E5E11374A6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*",
                    "matchCriteriaId": "512EE3A8-A590-4501-9A94-5D4B268D6138",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: roccat: fix use-after-free in roccat_report_event\n\nroccat_report_event() iterates over the device-\u003ereaders list without\nholding the readers_lock. This allows a concurrent roccat_release() to\nremove and free a reader while it\u0027s still being accessed, leading to a\nuse-after-free.\n\nProtect the readers list traversal with the readers_lock mutex."
          }
        ],
        "id": "CVE-2026-43111",
        "lastModified": "2026-06-17T10:48:57.367",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2026-05-06T10:16:24.807",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/181ea51ab0f6370842c5b49cfb86824253a1189e"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/20dca865460f7943cf70afca274b60dac371f546"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/36bb2d0b915014bbdc5044982b31b57b78045b93"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/441689e3103694caa3e2d62b7d57c7bccefa5e37"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/bca0b595e15450dd66b1153c76c4ef1087ee011b"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/d802d848308b35220f21a8025352f0c0aba15c12"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/e16a6d11bd77b81632165f02cf0d5946df74b3b7"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/e6a445513fbc6a0329d2d5ff375b6725750ec5a6"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-416"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-07-02T12:50:07+00:00",
      "cve": "CVE-2026-43111",
      "id": "CVE-2026-43111",
      "initial_release_date": "2026-05-06T00:00:00+00:00",
      "product_status:known_affected": "260",
      "product_status:known_not_affected": "14",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: HID: roccat: fix use-after-free in roccat_report_event",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43111.json",
      "version": "3"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.