Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-46932

Input: appletouch - initialize work before device registration

Description

In the Linux kernel, the following vulnerability has been resolved: Input: appletouch - initialize work before device registration Syzbot has reported warning in __flush_work(). This warning is caused by work->func == NULL, which means missing work initialization. This may happen, since input_dev->close() calls cancel_work_sync(&dev->work), but dev->work initalization happens _after_ input_register_device() call. So this patch moves dev->work initialization before registering input device

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5a6eb676d3bc4d7a6feab200a92437b62ad298da to < d2cb2bf39a6d17ef4bdc0e59c1a35cf5751ad8f4affected
  • 5a6eb676d3bc4d7a6feab200a92437b62ad298da to < d1962f263a176f493400b8f91bfbf2bfedce951eaffected
  • 5a6eb676d3bc4d7a6feab200a92437b62ad298da to < 292d2ac61fb0d9276a0f7b7ce4f50426f2a1c99faffected
  • 5a6eb676d3bc4d7a6feab200a92437b62ad298da to < a02e1404e27855089d2b0a0acc4652c2ce65fe46affected
  • 5a6eb676d3bc4d7a6feab200a92437b62ad298da to < 975774ea7528b489930b76a77ffc4d5379b95ff2affected
  • 5a6eb676d3bc4d7a6feab200a92437b62ad298da to < 9f329d0d6c91142cf0ad08d23c72dd195db2633caffected
  • 5a6eb676d3bc4d7a6feab200a92437b62ad298da to < e79ff8c68acb1eddf709d3ac84716868f2a91012affected
  • 5a6eb676d3bc4d7a6feab200a92437b62ad298da to < 9f3ccdc3f6ef10084ceb3a47df0961bec6196fd0affected

Linux Linux

Default version status: affected

  • 2.6.23affected
  • 0 to < 2.6.23unaffected
  • 4.4.298 to ≤ 4.4.*unaffected
  • 4.9.296 to ≤ 4.9.*unaffected
  • 4.14.261 to ≤ 4.14.*unaffected
  • 4.19.224 to ≤ 4.19.*unaffected
  • 5.4.170 to ≤ 5.4.*unaffected
  • 5.10.90 to ≤ 5.10.*unaffected
  • 5.15.13 to ≤ 5.15.*unaffected
  • 5.16 to ≤ *unaffected

References