Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix FF device cleanup on init failure hidpp_ff_init() creates the input force-feedback device with input_ff_create(), then allocates the HID++ FF private data, effect ID array, and workqueue. If any of those allocations fail after input_ff_create() succeeds, the function returns an error without destroying the FF device. Add an unwind path that frees the private allocations made by hidpp_ff_init() and calls input_ff_destroy() for failures after input_ff_create() succeeds.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected ff21a635dd1a9c6ca378847160897649cdbbfae4 before 360a49fc53acdfe2dbb80c23cfa606ed7e13a85d; affected ff21a635dd1a9c6ca378847160897649cdbbfae4 before 6bb216586a3cb4ce327511a7c0445fa88e85b3cb; affected ff21a635dd1a9c6ca378847160897649cdbbfae4 before 2fd9c8112907c14efefe6a90d20b774737052db3; affected ff21a635dd1a9c6ca378847160897649cdbbfae4 before 13378c9ac0a1bcdf49ba158e4199594aafb589cd; affected ff21a635dd1a9c6ca378847160897649cdbbfae4 before dd5be4d9ce2dfc4d4a4527ef7d31d21a78e3cdac |
| Linux / Linux | affected 4.6; unaffected 0 before 4.6; unaffected 6.6.160 through 6.6.*; unaffected 6.12.114 through 6.12.*; unaffected 6.18.57 through 6.18.*; unaffected 7.2.6 through 7.2.*; unaffected 7.3 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/360a49fc53acdfe2dbb80c23cfa606ed7e13a85d
- https://git.kernel.org/stable/c/6bb216586a3cb4ce327511a7c0445fa88e85b3cb
- https://git.kernel.org/stable/c/2fd9c8112907c14efefe6a90d20b774737052db3
- https://git.kernel.org/stable/c/13378c9ac0a1bcdf49ba158e4199594aafb589cd
- https://git.kernel.org/stable/c/dd5be4d9ce2dfc4d4a4527ef7d31d21a78e3cdac