Description
In the Linux kernel, the following vulnerability has been resolved: HID: asus: avoid memory leak in asus_report_fixup() The asus_report_fixup() function was returning a newly allocated kmemdup()-allocated buffer, but never freeing it. Switch to devm_kzalloc() to ensure the memory is managed and freed automatically when the device is removed. The caller of report_fixup() does not take ownership of the returned pointer, but it is permitted to return a pointer whose lifetime is at least that of the input buffer. Also fix a harmless out-of-bounds read by copying only the original descriptor size.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
5703e52cc711bc01e72cf12b86a126909c79d213 to < 726765b43deb2b4723869d673cc5fc6f7a3b2059affected5703e52cc711bc01e72cf12b86a126909c79d213 to < ede95cfcab8064d9a08813fbd7ed42cea8843dcfaffected5703e52cc711bc01e72cf12b86a126909c79d213 to < 2e4fe6b15c2f390c023b20d728b1a3fe7ea4f973affected5703e52cc711bc01e72cf12b86a126909c79d213 to < f20f17cffbe34fb330267e0f8084f5565f807444affected5703e52cc711bc01e72cf12b86a126909c79d213 to < 7a6d6e4d8af044f94fa97e97af5ff2771e1fbebdaffected5703e52cc711bc01e72cf12b86a126909c79d213 to < a41cc7c1668e44ff2c2d36f9a6353253ffc43e3caffected5703e52cc711bc01e72cf12b86a126909c79d213 to < 84724ac4821a160d47b84289adf139023027bdbbaffected5703e52cc711bc01e72cf12b86a126909c79d213 to < 2bad24c17742fc88973d6aea526ce1353f5334a3affected
Linux Linux
Default version status: affected
4.14affected0 to < 4.14unaffected5.10.253 to ≤ 5.10.*unaffected5.15.203 to ≤ 5.15.*unaffected6.1.168 to ≤ 6.1.*unaffected6.6.131 to ≤ 6.6.*unaffected6.12.80 to ≤ 6.12.*unaffected6.18.21 to ≤ 6.18.*unaffected6.19.11 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/726765b43deb2b4723869d673cc5fc6f7a3b2059 ↗
- https://git.kernel.org/stable/c/ede95cfcab8064d9a08813fbd7ed42cea8843dcf ↗
- https://git.kernel.org/stable/c/2e4fe6b15c2f390c023b20d728b1a3fe7ea4f973 ↗
- https://git.kernel.org/stable/c/f20f17cffbe34fb330267e0f8084f5565f807444 ↗
- https://git.kernel.org/stable/c/7a6d6e4d8af044f94fa97e97af5ff2771e1fbebd ↗
- https://git.kernel.org/stable/c/a41cc7c1668e44ff2c2d36f9a6353253ffc43e3c ↗
- https://git.kernel.org/stable/c/84724ac4821a160d47b84289adf139023027bdbb ↗
- https://git.kernel.org/stable/c/2bad24c17742fc88973d6aea526ce1353f5334a3 ↗