The Linux kernel’s HID subsystem for Corsair devices does not verify the size of status and firmware events before reading them. This omission allows malformed events to trigger an out‑of‑bounds read, which can lead to information leakage or kernel crashes. The flaw is an instance of Out‑of‑Bounds Read (CWE‑125). Attackers can exploit it by sending crafted HID data, resulting in local denial of service.

The vulnerability affects any Linux kernel that incorporates the HID Corsair driver prior to the patch. All distributions utilizing an unpatched kernel are susceptible, as the fix is included in kernel commits such as 0329354abba3, 08d8814521, and 79465a3005.

The CVSS score of 5.3 indicates medium severity, while the EPSS score of < 1% indicates a very low exploitation probability. The likely attack vector involves an attacker supplying malformed HID events to the kernel driver through a compromised or physically accessed USB device. Once triggered, the kernel may panic, leading to a system reboot or denial of service. This vulnerability is not listed in the CISA KEV catalog.