Description
In the Linux kernel, the following vulnerability has been resolved: usb: idmouse: fix an uninit-value in idmouse_open In idmouse_create_image, if any ftip_command fails, it will go to the reset label. However, this leads to the data in bulk_in_buffer[HEADER..IMGSIZE] uninitialized. And the check for valid image incurs an uninitialized dereference. Fix this by moving the check before reset label since this check only be valid if the data after bulk_in_buffer[HEADER] has concrete data. Note that this is found by KMSAN, so only kernel compilation is tested.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
4244f72436ab77c3c29a6447af81734ab3925d85 to < b3304a6df957cc89a0590cb505388d659bf3db4caffected4244f72436ab77c3c29a6447af81734ab3925d85 to < 7dad42032f68718259590b0cc7654e9a95ff9762affected4244f72436ab77c3c29a6447af81734ab3925d85 to < f589b667567fde4f81d6e6c40f42b9f2224690eaaffected4244f72436ab77c3c29a6447af81734ab3925d85 to < 1eae30c0113dde7522088231584d62415011a035affected4244f72436ab77c3c29a6447af81734ab3925d85 to < b8bbae3236ab7dccc66c42bc3f7cdbcfc0786e54affected4244f72436ab77c3c29a6447af81734ab3925d85 to < 20b8c456df584ebb2387dc23d40ebe4ff334417caffected4244f72436ab77c3c29a6447af81734ab3925d85 to < 6163a5ae097bc78fa26c243fb384537e25610fd7affected4244f72436ab77c3c29a6447af81734ab3925d85 to < adad163d1cff248a5df9f7cec50158e6ca89f33baffected4244f72436ab77c3c29a6447af81734ab3925d85 to < bce2b0539933e485d22d6f6f076c0fcd6f185c4caffected
Linux Linux
Default version status: affected
2.6.13affected0 to < 2.6.13unaffected4.9.331 to ≤ 4.9.*unaffected4.14.296 to ≤ 4.14.*unaffected4.19.262 to ≤ 4.19.*unaffected5.4.220 to ≤ 5.4.*unaffected5.10.150 to ≤ 5.10.*unaffected5.15.75 to ≤ 5.15.*unaffected5.19.17 to ≤ 5.19.*unaffected6.0.3 to ≤ 6.0.*unaffected6.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/b3304a6df957cc89a0590cb505388d659bf3db4c ↗
- https://git.kernel.org/stable/c/7dad42032f68718259590b0cc7654e9a95ff9762 ↗
- https://git.kernel.org/stable/c/f589b667567fde4f81d6e6c40f42b9f2224690ea ↗
- https://git.kernel.org/stable/c/1eae30c0113dde7522088231584d62415011a035 ↗
- https://git.kernel.org/stable/c/b8bbae3236ab7dccc66c42bc3f7cdbcfc0786e54 ↗
- https://git.kernel.org/stable/c/20b8c456df584ebb2387dc23d40ebe4ff334417c ↗
- https://git.kernel.org/stable/c/6163a5ae097bc78fa26c243fb384537e25610fd7 ↗
- https://git.kernel.org/stable/c/adad163d1cff248a5df9f7cec50158e6ca89f33b ↗
- https://git.kernel.org/stable/c/bce2b0539933e485d22d6f6f076c0fcd6f185c4c ↗