Memory Corruption in Linux Kernel Affecting nzxt-smart2 Driver

CVE-2026-74551

What is CVE-2026-74551?

A vulnerability in the Linux kernel's nzxt-smart2 driver can lead to memory corruption due to improper alignment of the DMA output buffer. When the function send_output_report() is executed, it invokes hid_hw_output_report(), causing the USB HID core to utilize usb_interrupt_msg(). This process can corrupt memory by flushing or invalidating cachelines, especially in non-coherent CPU architectures like ARM or MIPS. The problem arises from concurrent modifications to adjacent variables, leading to unpredictable behavior and runtime warnings. To resolve this issue, it is recommended to align the output buffer to ARCH_DMA_MINALIGN.

References