Use-After-Free Vulnerability in Corsair Void Headset by Linux Kernel

CVE-2025-21797

Summary

A use-after-free vulnerability was discovered in the Linux kernel's handling of Corsair Void headsets. This flaw arose from a missed call to cancel_delayed_work_sync() within the corsair_void_remove() function. As a result, this could potentially lead to unexpected behavior or system crashes, presenting an opportunity for an attacker to exploit the vulnerability. It is essential for users of affected kernel versions to update to the latest releases where this issue has been resolved.

References