CVE-2025-21797
Published: 27 February 2025
Description
In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Add missing delayed work cancel for headset status The cancel_delayed_work_sync() call was missed, causing a use-after-free in corsair_void_remove().
Security Summary
CVE-2025-21797 is a use-after-free vulnerability (CWE-416) in the Linux kernel's HID driver for Corsair Void headsets. The issue arises in the corsair_void_remove() function due to a missing cancel_delayed_work_sync() call for headset status delayed work, which can lead to a use-after-free condition. It has a CVSS v3.1 base score of 7.8 (High), with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
A local attacker with low privileges can exploit this vulnerability with low complexity and no user interaction required. Successful exploitation could result in high impacts to confidentiality, integrity, and availability, potentially allowing arbitrary code execution or system crashes on affected systems with the vulnerable Corsair Void HID driver loaded.
The vulnerability has been addressed in upstream Linux kernel commits, including 2dcb56a0a4da6946f6c18288da595c13e0d2af86 and 48e487b002891eb0aeaec704c9bed51f028deff1, which add the missing cancel_delayed_work_sync() call. Security practitioners should ensure systems are updated to kernel versions incorporating these stable fixes to mitigate the issue.
Details
- CWE(s)