Use-After-Free Vulnerability in Roccat Devices by Linux Kernel

CVE-2026-43111

What is CVE-2026-43111?

In the Linux kernel, a vulnerability in the handling of Roccat devices has been identified. The function roccat_report_event() accesses the device's readers list without proper synchronization. This oversight allows a concurrent process to free a reader while it is being accessed, resulting in a use-after-free condition. The issue has been addressed by implementing a mutex lock around the readers list traversal, ensuring safe access and preventing potential exploitation.

References