Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2023-53454

HID: multitouch: Correct devm device reference for hidinput input_dev name

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 4.14.326, 4.19.295, 5.4.257, 5.10.195, 5.15.132, and 3 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Correct devm device reference for hidinput input_dev name Reference the HID device rather than the input device for the devm allocation of the input_dev name. Referencing the input_dev would lead to a use-after-free when the input_dev was unregistered and subsequently fires a uevent that depends on the name. At the point of firing the uevent, the name would be freed by devres management. Use devm_kasprintf to simplify the logic for allocating memory and formatting the input_dev name string.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Linux Linux

    From c08d46aa805ba46d501f610c2448d07bea979780 · fixed in ac0d389402a6ff9ad92cea02c2d8c711483b91ab; From c08d46aa805ba46d501f610c2448d07bea979780 · fixed in 39c70c19456e50dcb3abfe53539220dff0490f1d; From c08d46aa805ba46d501f610c2448d07bea979780 · fixed in df7ca43fe090e1a56c216c8ebc106ef5fd49afc6; From c08d46aa805ba46d501f610c2448d07bea979780 · fixed in 15ec7cb55e7d88755aa01d44a7a1015a42bfce86; From c08d46aa805ba46d501f610c2448d07bea979780 · fixed in dde88ab4e45beb60b217026207aa9c14c88d71ab; From c08d46aa805ba46d501f610c2448d07bea979780 · fixed in 2763732ec1e68910719c75b6b896e11b6d3d622b; From c08d46aa805ba46d501f610c2448d07bea979780 · fixed in 1d7833db9fd118415dace2ca157bfa603dec9c8c; From c08d46aa805ba46d501f610c2448d07bea979780 · fixed in b70ac7849248ec8128fa12f86e3655ba38838f29; From c08d46aa805ba46d501f610c2448d07bea979780 · fixed in 4794394635293a3e74591351fff469cea7ad15a2

  • Linux Linux

    3.12

  • KernelLinux

    From 3.12.0 · fixed in 4.14.326; From 4.15.0 · fixed in 4.19.295; From 4.20.0 · fixed in 5.4.257; From 5.5.0 · fixed in 5.10.195; From 5.11.0 · fixed in 5.15.132; From 5.16.0 · fixed in 6.1.53; From 6.2.0 · fixed in 6.4.16; From 6.5.0 · fixed in 6.5.3

References 9

git.kernel.org