CVE-2026-68443

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-68443
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68443.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-68443
Downstream
Published
2026-08-12T00:07:33Z
Modified
2026-08-18T03:30:50Z
Summary
hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop
Details

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop

Calling hid_hw_stop() does not stop the device IO. This results in a race condition between hid_input_report() and the point immediately following the execution of hid_device_io_start() within the driver probe function. If the probe operation fails after "io start" has been initiated, this race condition will result in a UAF vulnerability.

Fix the problem by calling hid_device_io_stop() before calling hid_hw_stop().

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68443.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
42ac68e3d4ba06ad17bc56b790dbccc37e76e0ba
Fixed
a855f678ba37ef82c4dd22926ad740ecfb8dbedf
Fixed
f36e12cc8cfe996d627b8a82bd9df9e43270f6e2
Fixed
0842e9faab04f784d01125085195031252ff9695
Fixed
ff0c5c53d08274e200b48a4d53aa078265e873cb

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68443.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.8.0
Fixed
6.12.101
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.42
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68443.json"