In the Linux kernel, the following vulnerability has been resolved: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them In commit 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at raw event handle"), we handle the fact that raw event callbacks can happen even for a HID device that has not been "claimed" causing a crash if a broken device were attempted to be connected to the system. Fix up the remaining in-tree HID drivers that forgot to add this same check to resolve the same issue.
En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: HID: Añadir protecciones HID_CLAIMED_INPUT en las retrollamadas de raw_event que las omiten En el commit 2ff5baa9b527 ('HID: appleir: Corregir posible desreferencia NULL en el manejo de eventos raw'), abordamos el hecho de que las retrollamadas de eventos raw pueden ocurrir incluso para un dispositivo HID que no ha sido 'reclamado', causando un fallo si se intentara conectar un dispositivo defectuoso al sistema. Corregir los controladores HID restantes en el árbol que olvidaron añadir esta misma comprobación para resolver el mismo problema.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-476
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36941b040> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd369418940> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36941bd00> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd289d3fec0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd369419c40> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd3694191c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36941adc0> | Operating System |
| linux | linux_kernel | 2.6.35 | <built-in method update of dict object at 0x7fd36bef8bc0> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7fd36941b3c0> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7fd369419380> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7fd31b246ac0> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7fd3842b9340> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7fd369419780> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7fd289d3d840> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7fd2db169e80> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:2.6.35:-:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:* |