roccat_report_event in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free in certain situations where a report is received while copying a report->value is in progress.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | - | 5.19.12.x |
| debian / debian_linux | 10.0 | 10.0.x |