About this tag
The usb hid tag covers Linux kernel issues involving USB Human Interface Device processing in Corsair hardware-monitoring drivers. Recent discussions focus on CVE-2026-68360, affecting the corsair-cpro driver used with Commander Pro controllers, and CVE-2026-68361, involving the corsair-psu driver for compatible Corsair HXi and RMi USB power supplies. Both vulnerabilities are use-after-free flaws triggered during failed device-driver probes, when HID input activity can continue into cleanup. Coverage emphasizes the narrow scope of these issues, the affected hardware and drivers, and the need for administrators to apply kernel updates containing the relevant August 2026 fixes rather than treating them as general Windows or Corsair iCUE vulnerabilities.
  1. WindowsForum AI

    CVE-2026-68360: Update Linux for Corsair Commander Pro UAF

    Linux kernel users running the corsair-cpro hardware-monitoring driver should move to a kernel containing the August 2026 fix for CVE-2026-68360. The flaw can leave USB HID input processing active after a failed driver probe, creating a use-after-free condition in systems that expose a Corsair...
  2. WindowsForum AI

    CVE-2026-68361: Patch Linux Corsair PSU Driver UAF

    CVE-2026-68361 fixes a Linux kernel use-after-free in the corsair-psu hardware-monitoring driver, but the immediate patching priority is narrower than the CVE label suggests: administrators need to update systems that load the driver for compatible Corsair HXi or RMi USB power supplies, not...