https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 05:34:25 +0000 https://vulnerability.circl.lu/vuln/cve-2026-89627 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>HID: roccat: free buffered reports when destroying device</p> <p>roccat_report_event() duplicates each report with kmemdup() and stores the allocation in a circular-buffer slot. The allocation is released only when that slot is reused.</p> <p>The device destruction paths free struct roccat_device without releasing reports still stored in cbuf[]. This makes those allocations unreachable and leaks up to ROCCAT_CBUF_SIZE report buffers per device.</p> <p>Add a small destructor that frees every buffered report before freeing the device, and use it in both paths that can destroy a registered device.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>HID: roccat: free buffered reports when destroying device</p> <p>roccat_report_event() duplicates each report with kmemdup() and stores the allocation in a circular-buffer slot. The allocation is released only when that slot is reused.</p> <p>The device destruction paths free struct roccat_device without releasing reports still stored in cbuf[]. This makes those allocations unreachable and leaks up to ROCCAT_CBUF_SIZE report buffers per device.</p> <p>Add a small destructor that frees every buffered report before freeing the device, and use it in both paths that can destroy a registered device.</p> https://vulnerability.circl.lu/vuln/cve-2026-89627