The Linux kernel contained a vulnerability in the HID driver for Corsair Void devices where malformed status and firmware events could trigger out-of-bounds reads because the size of these events was not verified before reading. The fix involves checking the size of these events and issuing warnings when unexpected sizes are encountered, thereby preventing out-of-bounds memory access.

An attacker could potentially cause the kernel to read memory outside the intended bounds when processing malformed status or firmware events from Corsair Void devices. This could lead to information disclosure or kernel instability. No known exploits are reported in the wild.

This vulnerability has been resolved in the Linux kernel by implementing size checks on status and firmware events in the HID corsair-void driver. Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for the exact fixed versions and update guidance.