Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-49508

HID: elan: Fix potential double free in elan_input_configured

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: HID: elan: Fix potential double free in elan_input_configured 'input' is a managed resource allocated with devm_input_allocate_device(), so there is no need to call input_free_device() explicitly or there will be a double free. According to the doc of devm_input_allocate_device(): * Managed input devices do not need to be explicitly unregistered or * freed as it will be done automatically when owner device unbinds from * its driver (or binding fails).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 9a6a4193d65b853020ef0e66cecdf9e64a863883 to < c92ec22a991778a096342cf1a917ae36c5c86a90affected
  • 9a6a4193d65b853020ef0e66cecdf9e64a863883 to < f1d4f19a796551edc6679a681ea1756b8c578c08affected
  • 9a6a4193d65b853020ef0e66cecdf9e64a863883 to < 6d0726725c7c560495f5ff364862a2cefea542e3affected
  • 9a6a4193d65b853020ef0e66cecdf9e64a863883 to < 24f9dfdaece9bd75bb8dbfdba83eddeefdf7dc47affected
  • 9a6a4193d65b853020ef0e66cecdf9e64a863883 to < 5291451851feeb66fd4bf0826710f482f3b1ab38affected
  • 9a6a4193d65b853020ef0e66cecdf9e64a863883 to < 8bb1716507ebf12d50bbf181764481de3b6bc7fdaffected
  • 9a6a4193d65b853020ef0e66cecdf9e64a863883 to < 1af20714fedad238362571620be0bd690ded05b6affected

Linux Linux

Default version status: affected

  • 4.17affected
  • 0 to < 4.17unaffected
  • 4.19.247 to ≤ 4.19.*unaffected
  • 5.4.198 to ≤ 5.4.*unaffected
  • 5.10.121 to ≤ 5.10.*unaffected
  • 5.15.46 to ≤ 5.15.*unaffected
  • 5.17.14 to ≤ 5.17.*unaffected
  • 5.18.3 to ≤ 5.18.*unaffected
  • 5.19 to ≤ *unaffected

References