HID: magicmouse: avoid memory leak in magicmouse_report_fixup()

Summary

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: avoid memory leak in magicmouse_report_fixup() The magicmouse_report_fixup() function was returning a newly kmemdup()-allocated buffer, but never freeing it. The caller of report_fixup() does not take ownership of the returned pointer, but it is permitted to return a sub-portion of the input rdesc, whose lifetime is managed by the caller.

Timeline

1. Apr 22, 2026, 1:54 PM UTCCVE published
2. May 23, 2026, 4:05 PM UTCRecord last updated

Affected versions

• Linux Linux

  From 5.15.17 · fixed in 5.15.203; From 5.16.3 · fixed in 5.17

• Linux Linux

  5.17

References 7