High · published September 15, 2025
In the Linux kernel, the following vulnerability has been resolved:
HID: nvidia-shield: Reference hid_device devm allocation of input_dev name
Use hid_device for devm allocation of the input_dev name to avoid a
use-after-free. input_unregister_device would trigger devres cleanup of all
resources associated with the input_dev, free-ing the name. The name would
subsequently be used in a uevent fired at the end of unregistering the
input_dev.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 6.5, < 6.5.3 | 6.5.3 |