CVE-2026-21369

MediumCVSS 5.3

Published: 06/07/2026(UTC)Updated: 07/07/2026(UTC)Translated: 08/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.09%

1th percentile - higher than 1% of all known CVEs

Memory corruption occurs when handling flash commands due to outdated LED count values being used after userspace modification.

An attacker with userspace access can trigger memory corruption, potentially leading to system crashes or arbitrary code execution.

Immediately update the driver or firmware to a version that properly validates LED count values before use.

Original NVD description (English source)

Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification.