HID: logitech-hidpp: Fix FF device cleanup on init failure
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.6.160, 6.12.114, 6.18.57, 7.2.6
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix FF device cleanup on init failure hidpp_ff_init() creates the input force-feedback device with input_ff_create(), then allocates the HID++ FF private data, effect ID array, and workqueue. If any of those allocations fail after input_ff_create() succeeds, the function returns an error without destroying the FF device. Add an unwind path that frees the private allocations made by hidpp_ff_init() and calls input_ff_destroy() for failures after input_ff_create() succeeds.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From ff21a635dd1a9c6ca378847160897649cdbbfae4 · fixed in 360a49fc53acdfe2dbb80c23cfa606ed7e13a85d; From ff21a635dd1a9c6ca378847160897649cdbbfae4 · fixed in 6bb216586a3cb4ce327511a7c0445fa88e85b3cb; From ff21a635dd1a9c6ca378847160897649cdbbfae4 · fixed in 2fd9c8112907c14efefe6a90d20b774737052db3; From ff21a635dd1a9c6ca378847160897649cdbbfae4 · fixed in 13378c9ac0a1bcdf49ba158e4199594aafb589cd; From ff21a635dd1a9c6ca378847160897649cdbbfae4 · fixed in dd5be4d9ce2dfc4d4a4527ef7d31d21a78e3cdac
- Linux Linux
4.6
- KernelLinux
From 4.6.0 · fixed in 6.6.160; From 6.7.0 · fixed in 6.12.114; From 6.13.0 · fixed in 6.18.57; From 6.19.0 · fixed in 7.2.6