CVE-2024-58020
HID: multitouch: Add NULL check in mt_input_configured
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
27 Feb 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In the Linux kernel, the following vulnerability has been resolved:
HID: multitouch: Add NULL check in mt_input_configured
devm_kasprintf() can return a NULL pointer on failure,but this
returned value in mt_input_configured() is not checked.
Add NULL check in mt_input_configured(), to handle kernel NULL
pointer dereference error.
Affected products
Linux · LinuxReferences
https://cert-portal.siemens.com/productcert/html/ssa-265688.htmlhttps://git.kernel.org/stable/c/2052b44cd0a62b6fdbe3371e5ba6029c56c400cahttps://git.kernel.org/stable/c/4e7113f591163d99adc7cbcd7295030c8c5d3fc7https://git.kernel.org/stable/c/62f8bf06262b6fc55c58f4c5256140f1382f3b01https://git.kernel.org/stable/c/97c09cc2e72769edb6994b531edcfa313b96badehttps://git.kernel.org/stable/c/9b8e2220d3a052a690b1d1b23019673e612494c5https://git.kernel.org/stable/c/a04d96ef67a42165f93194eef22a270acba4b74chttps://git.kernel.org/stable/c/a6bfd3856e9f3da083f177753c623d58ba935e0ahttps://git.kernel.org/stable/c/aa879ef6d3acf96fa2c7122d0632061d4ea58d48https://lists.debian.org/debian-lts-announce/2025/03/msg00028.htmlhttps://lists.debian.org/debian-lts-announce/2025/05/msg00030.html