Description
In the Linux kernel, the following vulnerability has been resolved: HID: apple: avoid memory leak in apple_report_fixup() The apple_report_fixup() function was returning a newly kmemdup()-allocated buffer, but never freeing it. The caller of report_fixup() does not take ownership of the returned pointer, but it *is* permitted to return a sub-portion of the input rdesc, whose lifetime is managed by the caller.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
6e143293e17a73c9313f91c5ca3aaacbaef030cf to < e2f090aeb7b9930a964e151910f4d45b04c8a7e5affected6e143293e17a73c9313f91c5ca3aaacbaef030cf to < 2635d0c715f3fb177e0f80ecd5fa48feb6bf3884affected6e143293e17a73c9313f91c5ca3aaacbaef030cf to < 31860c3f7ac66ab897a8c90dc4e74fa17ca0b624affected6e143293e17a73c9313f91c5ca3aaacbaef030cf to < be1a341c161430282acdfe2ac99b413271575cf1affected6e143293e17a73c9313f91c5ca3aaacbaef030cf to < e652ebd29928181c3e6820e303da25873e9917d4affected6e143293e17a73c9313f91c5ca3aaacbaef030cf to < 239c15116d80f67d32f00acc34575f1a6b699613affected
Linux Linux
Default version status: affected
5.17affected0 to < 5.17unaffected6.1.168 to ≤ 6.1.*unaffected6.6.131 to ≤ 6.6.*unaffected6.12.80 to ≤ 6.12.*unaffected6.18.21 to ≤ 6.18.*unaffected6.19.11 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/e2f090aeb7b9930a964e151910f4d45b04c8a7e5 ↗
- https://git.kernel.org/stable/c/2635d0c715f3fb177e0f80ecd5fa48feb6bf3884 ↗
- https://git.kernel.org/stable/c/31860c3f7ac66ab897a8c90dc4e74fa17ca0b624 ↗
- https://git.kernel.org/stable/c/be1a341c161430282acdfe2ac99b413271575cf1 ↗
- https://git.kernel.org/stable/c/e652ebd29928181c3e6820e303da25873e9917d4 ↗
- https://git.kernel.org/stable/c/239c15116d80f67d32f00acc34575f1a6b699613 ↗