CVE-2022-49508

Summary

In the Linux kernel, the following vulnerability has been resolved:

HID: elan: Fix potential double free in elan_input_configured

'input' is a managed resource allocated with devm_input_allocate_device(), so there is no need to call input_free_device() explicitly or there will be a double free.

According to the doc of devm_input_allocate_device():

  • Managed input devices do not need to be explicitly unregistered or
  • freed as it will be done automatically when owner device unbinds from
  • its driver (or binding fails).

Affected Software

VendorProductVersion RangeStatus
LinuxLinux9a6a4193d65b853020ef0e66cecdf9e64a863883 < c92ec22a991778a096342cf1a917ae36c5c86a90affected
LinuxLinux9a6a4193d65b853020ef0e66cecdf9e64a863883 < f1d4f19a796551edc6679a681ea1756b8c578c08affected
LinuxLinux9a6a4193d65b853020ef0e66cecdf9e64a863883 < 6d0726725c7c560495f5ff364862a2cefea542e3affected
LinuxLinux9a6a4193d65b853020ef0e66cecdf9e64a863883 < 24f9dfdaece9bd75bb8dbfdba83eddeefdf7dc47affected
LinuxLinux9a6a4193d65b853020ef0e66cecdf9e64a863883 < 5291451851feeb66fd4bf0826710f482f3b1ab38affected
LinuxLinux9a6a4193d65b853020ef0e66cecdf9e64a863883 < 8bb1716507ebf12d50bbf181764481de3b6bc7fdaffected
LinuxLinux9a6a4193d65b853020ef0e66cecdf9e64a863883 < 1af20714fedad238362571620be0bd690ded05b6affected
LinuxLinux4.17affected
LinuxLinux0 < 4.17unaffected
LinuxLinux4.19.247 <= 4.19.*unaffected
LinuxLinux5.4.198 <= 5.4.*unaffected
LinuxLinux5.10.121 <= 5.10.*unaffected
LinuxLinux5.15.46 <= 5.15.*unaffected
LinuxLinux5.17.14 <= 5.17.*unaffected
LinuxLinux5.18.3 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References