The Linux kernel hwmon driver for the NZXT Kraken3 device incorrectly stops device I/O by calling hid_hw_stop before stopping I/O, which causes a race condition between hid_input_report() and cleanup code when the probe fails after starting I/O. This flaw results in a use‑after‑free that can corrupt memory if an attacker manages to trigger the race condition.

Any Linux kernel release that includes the hwmon driver for nzxt‑kraken3 before the referenced commits is affected. Systems that load the driver by connecting a NZXT Kraken3 USB device will fall under the affected scope, whereas kernel versions that already incorporate the commit are safe.

The CVSS score of 4.1 indicates low severity, and the EPSS score of less than 1% shows a very low likelihood of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. An attacker with local access to the USB device could attempt to force the driver to initiate I/O and then cause the probe to fail, exploiting the race condition and the resulting use‑after‑free to corrupt memory.