Description
In the Linux kernel, the following vulnerability has been resolved:

hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop

Calling hid_hw_stop() does not stop the device IO.
This results in a race condition between hid_input_report() and the point
immediately following the execution of hid_device_io_start() within
the driver probe function. If the probe operation fails after "io start"
has been initiated, this race condition will result in a UAF vulnerability.

Fix the problem by calling hid_device_io_stop() before calling
hid_hw_stop().
Published: 2026-08-10
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The Linux kernel hwmon driver for the nzxt‑kraken3 device incorrectly stops device I/O, causing a race condition between hid_input_report() and cleanup code when the probe fails after I/O has started. This results in a use‑after‑free vulnerability that can corrupt memory. The flaw stems from improper ordering of stop and cleanup operations in the driver.

Affected Systems

All Linux kernel releases that include the hwmon driver for nzxt‑kraken3 before the fix are susceptible. Any system that loads this driver—typically through a USB connection to the NZXT Kraken3 device—falls under the affected scope. Kernel versions at the time of the patch commit (see provided git references) do not contain the vulnerability.

Risk and Exploitability

The CVSS score is not disclosed, but a kernel‑space use‑after‑free represents a high‑severity flaw. The EPSS score is unavailable, and the vulnerability is not listed in the CISA KEV catalog. The race condition could be leveraged by a local attacker with write access to the USB device, possibly causing memory corruption. The likely attack vector is local via the USB interface, requiring the attacker to trigger a probe failure after I/O has started.

Generated by OpenCVE AI on August 10, 2026 at 16:38 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the kernel patch that changes the hwmon driver to call hid_device_io_stop() before hid_hw_stop() by updating to a distro release that includes the referenced commits
  • Reboot the system after the kernel update to ensure the patched driver loads
  • If an updated kernel is unavailable, temporarily remove or unload the nzxt‑kraken3 driver or disconnect the USB device to prevent the race condition from occurring

Generated by OpenCVE AI on August 10, 2026 at 16:38 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 10 Aug 2026 17:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-362
CWE-416

Mon, 10 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop Calling hid_hw_stop() does not stop the device IO. This results in a race condition between hid_input_report() and the point immediately following the execution of hid_device_io_start() within the driver probe function. If the probe operation fails after "io start" has been initiated, this race condition will result in a UAF vulnerability. Fix the problem by calling hid_device_io_stop() before calling hid_hw_stop().
Title hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-10T12:03:35.247Z

Reserved: 2026-07-30T09:28:09.385Z

Link: CVE-2026-68358

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-10T16:45:03Z

Weaknesses
  • CWE-362

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

  • CWE-416

    Use After Free