CVE-2021-46932

Input: appletouch - initialize work before device registration

published February 27, 2024

CVSS
—
EPSS
0%
Percentile
12.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

Input: appletouch - initialize work before device registration

Syzbot has reported warning in __flush_work(). This warning is caused by

work->func == NULL, which means missing work initialization.

This may happen, since input_dev->close() calls

cancel_work_sync(&dev->work), but dev->work initalization happens _after_

input_register_device() call.

So this patch moves dev->work initialization before registering input

device

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00228 · 12.9th percentile
Published
2024-02-27T09:44Z
EPSS history
Timeline
  • 27 FEB 09:44Z
    Input: appletouch - initialize work before device registration
    cvelistv5