CVE-2026-68359

A flaw was found in the Linux kernel's hwmon (nzxt-smart2) component. A race condition exists when the hid_hw_stop() function is called without first stopping device input/output (IO). If a device probe operation fails after IO has been initiated, this race condition can lead to a use-after-free (UAF) vulnerability. This could allow a local attacker to potentially cause a system crash (denial of service) or achieve arbitrary code execution.

This vulnerability does not present a security risk to Red Hat Enterprise Linux environments because the vulnerable NZXT Smart Device V2 hardware monitoring driver is not present in supported Red Hat kernels. Upstream exploitation would require an attacker with local access to attach a specialized hardware device, or emulate one, and trigger a probe failure during device initialization. Because the underlying driver code is not built into shipped enterprise kernels, standard deployments are unaffected.