CVE-2024-58021: HID: winwing: Add NULL check in winwing_init_led()
In the Linux kernel, the following vulnerability has been resolved:
HID: winwing: Add NULL check in winwinginitled()
devmkasprintf() can return a NULL pointer on failure,but this returned value in winwinginitled() is not checked. Add NULL check in winwinginitled(), to handle kernel NULL pointer dereference error.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.16-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Compensating control
Add a NULL check for the value returned by devm_kasprintf() in winwing_init_led() to prevent kernel NULL pointer dereference.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-58021?
CVE-2024-58021 has been classified as a moderate severity vulnerability due to the potential for NULL pointer dereference.
How do I fix CVE-2024-58021?
To fix CVE-2024-58021, update to the latest Linux kernel version that includes the NULL check in winwing_init_led().
Which kernel versions are affected by CVE-2024-58021?
CVE-2024-58021 affects Linux kernel versions from 6.10 to 6.12.16 and versions 6.13.0 to 6.13.4, as well as 6.14-rc1 and 6.14-rc2.
What component is impacted by CVE-2024-58021?
CVE-2024-58021 impacts the Human Interface Device (HID) subsystem in the Linux kernel.
Is CVE-2024-58021 being actively exploited?
As of now, there are no known active exploits for CVE-2024-58021.