CVE-2026-89629

A flaw was found in the Linux kernel, specifically within the corsair-void driver for Human Interface Devices (HID). This vulnerability allows an attacker to cause an out-of-bounds read by sending malformed status and firmware events. The system fails to properly check the size of these events, which could lead to the disclosure of sensitive information or system instability.

A moderate severity out-of-bounds read flaw was found in the corsair-void HID driver (drivers/hid/hid-corsair-void.c) of the Linux kernel shipped in Red Hat Enterprise Linux 10 and Red Hat In-Vehicle OS. The driver processed Corsair Void headset status and firmware events without first checking the size of the received HID report, so a malformed, shorter-than-expected report could cause the kernel to read beyond the report buffer. Exploitation requires an attacker to use a malicious or compromised physical HID device, such as a Corsair Void headset or its USB dongle, or another means of supplying crafted input reports to the host; the flaw is not network reachable. The impact is limited to a small out-of-bounds read that may disclose limited kernel memory or cause local driver instability, with no evidence of an out-of-bounds write, use-after-free, or privilege escalation. Red Hat rated this flaw Moderate with a CVSS 3.1 score of 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), reflecting the local or physical access required to deliver malformed HID reports. Only products whose kernels contain the corsair-void driver are affected: Red Hat Enterprise Linux 10.2, 10.3, and 10.4, and Red Hat In-Vehicle OS 2 (kernel and kernel-ivos-qualcomm components). Red Hat Enterprise Linux 6, 7, 8, 9, and 10.0 are not affected because the vulnerable code is not present in their kernels, and OpenShift Container Platform (RHEL CoreOS) images are likewise not affected. For the affected streams, the fix has been deferred to a future update; the residual risk is considered low because exploitation requires an attacker to attach or compromise a physical HID device on the target system, limiting practical exploitability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.