In the Linux kernel, the following vulnerability has been resolved: HID: amd_sfh: free driver_data after destroying hid device HID driver callbacks aren't called anymore once hid_destroy_device() h…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: HID: amd_sfh: free driver_data after destroying hid device HID driver callbacks aren't called anymore once hid_destroy_device() has been called. Hence, hid driver_data should be freed only after the hid_destroy_device() function returned as driver_data is used in several callbacks. I observed a crash with kernel 6.10.0 on my T14s Gen 3, after enabling KASAN to debug memory allocation, I got this output: [ 13.050438] ===…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/60dc4ee0428d70bcbb41436b6729d29f1cbdfb89 Patch
- https://git.kernel.org/stable/c/775125c7fe38533aaa4b20769f5b5e62cc1170a0 Patch
- https://git.kernel.org/stable/c/86b4f5cf91ca03c08e3822ac89476a677a780bcc Patch
- https://git.kernel.org/stable/c/97155021ae17b86985121b33cf8098bcde00d497 Patch
- https://git.kernel.org/stable/c/adb3e3c1ddb5a23b8b7122ef1913f528d728937c Patch
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html Mailing List
Timeline
- nvd_ingest NVD