CVE-2025-38007
HID: uclogic: Add NULL check in uclogic_input_configured()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.1.140, 6.5, 6.6
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Add NULL check in uclogic_input_configured() devm_kasprintf() returns NULL when memory allocation fails. Currently, uclogic_input_configured() does not check for this case, which results in a NULL pointer dereference. Add NULL check after devm_kasprintf() to prevent this issue.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 6.1.53 · fixed in 6.1.140; From 6.4.16 · fixed in 6.5; From 6.5.3 · fixed in 6.6
- Linux Linux
6.6
References 7
git.kernel.org
- stable/c/a9f58479a1a2c6f72907679c4df2f4ed92b05b39
- stable/c/00d52b2fa6083dd0f5c44f3604cd1bad1f9177dc
- stable/c/01b76cc8ca243fc3376b035aa326bbc4f03d384b
- stable/c/ad6caaf29bc26a48b1241ce82561fcbcf0a75aa9
- stable/c/94e7272b636a0677082e0604609e4c471e0a2caf
- stable/c/b616453d719ee1b8bf2ea6f6cc6c6258a572a590
- stable/c/bd07f751208ba190f9b0db5e5b7f35d5bb4a8a1e