CVE-2025-21746

Input: synaptics - fix crash when enabling pass-through port

published February 27, 2025

CVSS
—
EPSS
0%
Percentile
3.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

Input: synaptics - fix crash when enabling pass-through port

When enabling a pass-through port an interrupt might come before psmouse

driver binds to the pass-through port. However synaptics sub-driver

tries to access psmouse instance presumably associated with the

pass-through port to figure out if only 1 byte of response or entire

protocol packet needs to be forwarded to the pass-through port and may

crash if psmouse instance has not been attached to the port yet.

Fix the crash by introducing open() and close() methods for the port and

check if the port is open before trying to access psmouse instance.

Because psmouse calls serio_open() only after attaching psmouse instance

to serio port instance this prevents the potential crash.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00150 · 3.8th percentile
Published
2025-02-27T02:12Z
EPSS history
Timeline
  • 27 FEB 02:12Z
    Input: synaptics - fix crash when enabling pass-through port
    cvelistv5