CVE-2024-58020CWE-476

CVE-2024-58020

Medium · published February 27, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
17.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

HID: multitouch: Add NULL check in mt_input_configured

devm_kasprintf() can return a NULL pointer on failure,but this

returned value in mt_input_configured() is not checked.

Add NULL check in mt_input_configured(), to handle kernel NULL

pointer dereference error.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00264 · 17.3th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2025-02-27T08:15Z
Affected products (12)
ProductVersionsFixed in
linux/linux_kernel≥ 4.14.326, < 4.154.15
linux/linux_kernel≥ 4.19.295, < 4.204.20
linux/linux_kernel≥ 5.4.257, < 5.55.5
linux/linux_kernel≥ 5.10.195, < 5.115.11
linux/linux_kernel≥ 5.15.132, < 5.165.16
linux/linux_kernel≥ 6.1.53, < 6.1.1296.1.129
linux/linux_kernel≥ 6.4.16, < 6.56.5
linux/linux_kernel≥ 6.5.3, < 6.6.796.6.79
linux/linux_kernel≥ 6.7, < 6.12.166.12.16
linux/linux_kernel≥ 6.13, < 6.13.46.13.4
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (14)
https://git.kernel.org/stable/c/2052b44cd0a62b6fdbe3371e5ba6029c56c400ca · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4e7113f591163d99adc7cbcd7295030c8c5d3fc7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/62f8bf06262b6fc55c58f4c5256140f1382f3b01 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/97c09cc2e72769edb6994b531edcfa313b96bade · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9b8e2220d3a052a690b1d1b23019673e612494c5 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a04d96ef67a42165f93194eef22a270acba4b74c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a6bfd3856e9f3da083f177753c623d58ba935e0a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/aa879ef6d3acf96fa2c7122d0632061d4ea58d48 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-019113.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-265688.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-457936.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-784472.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 27 FEB 02:18Z
    HID: multitouch: Add NULL check in mt_input_configured
    cvelistv5