Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-45008

Input: MT - limit max slots

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: Input: MT - limit max slots syzbot is reporting too large allocation at input_mt_init_slots(), for num_slots is supplied from userspace using ioctl(UI_DEV_CREATE). Since nobody knows possible max slots, this patch chose 1024.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 38e7afe96c7c0ad900824911c61fdb04078033dc to < 2829c80614890624456337e47320289112785f3eaffected
  • 38e7afe96c7c0ad900824911c61fdb04078033dc to < 87f610a1a7fbdb1f2e3d90b54c955bd3b8a0c322affected
  • 38e7afe96c7c0ad900824911c61fdb04078033dc to < 05dd9aabd04f9b5eb04dab9bb83d8c3e982d7549affected
  • 38e7afe96c7c0ad900824911c61fdb04078033dc to < 95f73d01f547dfc67fda3022c51e377a0454b505affected
  • 38e7afe96c7c0ad900824911c61fdb04078033dc to < 94736334b8a25e4fae8daa6934e54a31f099be43affected
  • 38e7afe96c7c0ad900824911c61fdb04078033dc to < 8f04edd554d191834e9e1349ef030318ea6b11baaffected
  • 38e7afe96c7c0ad900824911c61fdb04078033dc to < cd19f1799c32ba7b874474b1b968815ce5364f73affected
  • 38e7afe96c7c0ad900824911c61fdb04078033dc to < 99d3bf5f7377d42f8be60a6b9cb60fb0be34dcebaffected

Linux Linux

Default version status: affected

  • 2.6.36affected
  • 0 to < 2.6.36unaffected
  • 4.19.321 to ≤ 4.19.*unaffected
  • 5.4.283 to ≤ 5.4.*unaffected
  • 5.10.225 to ≤ 5.10.*unaffected
  • 5.15.166 to ≤ 5.15.*unaffected
  • 6.1.107 to ≤ 6.1.*unaffected
  • 6.6.48 to ≤ 6.6.*unaffected
  • 6.10.7 to ≤ 6.10.*unaffected
  • 6.11 to ≤ *unaffected

References