Linux Kernel Corsair Void Headset Delayed Work Cancellation Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's handling of Corsair Void headsets. The issue arises from a missing call to cancel_delayed_work_sync() in the corsair_void_remove() function, which can lead to improper memory management.

Impact

Exploitation of this vulnerability causes a use-after-free condition, which can potentially be exploited to execute arbitrary code or cause a denial-of-service by crashing the system.