What happened
In the Linux kernel, the following vulnerability has been resolved: HID: hidpp: fix potential UAF in hidpp_connect_event() If input_register_device() fails, we call input_free_device(), but keep stale pointer to the old device in hidpp->input, which could potentially lead to UAF. Fix that by resetting it to NULL before returning from hidpp_connect_event().
Affected versions
Linux: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 through before 3b8b2e58b078cd30e121401535541bb8a6d57133 (git); 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 through before 3303398cc2aa255ba251650a30024e11d48ea6c3 (git); 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 through before 6df6b1f2c49678211f65647c300bc51dda02893b (git); before 6.12.111 (semver); before 6.18.53 (semver) Fixed: See vendor advisory.
Why it matters
Review the vendor advisory and exposure of the affected product to determine operational impact.
Detection & mitigation
- Apply vendor-provided updates or mitigations.
- Review affected product exposure and access logs.
Public PoC references
No public PoC reference has passed the current publication threshold.