CVE-2024-45008

Input: MT - limit max slots

published September 4, 2024

CVSS
—
EPSS
0%
Percentile
14.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

Input: MT - limit max slots

syzbot is reporting too large allocation at input_mt_init_slots(), for

num_slots is supplied from userspace using ioctl(UI_DEV_CREATE).

Since nobody knows possible max slots, this patch chose 1024.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00239 · 14.1th percentile
Published
2024-09-04T19:54Z
EPSS history
Timeline
  • 04 SEP 19:54Z
    Input: MT - limit max slots
    cvelistv5