From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 077F3218AD3 for ; Wed, 26 Feb 2025 02:15:12 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1740536112; cv=none; b=bsHDpqwD87eMfG+gANSD245sn0kH5YdyZuyTV/nAeRXr2U7N0uipBHXrMBYnAl2jkylWk2M7x7QrqguoYxKSBrhgJRWc0nI8nKWpEU6xzUWobrhEVsSuD/xwBV/+msYZNGygtuOTCdD5OegJHSrqBfOVUF+h2OuV0zWbPu3ykC0= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1740536112; c=relaxed/simple; bh=Bd4Z/t3H22YuLE4scNV+b5vbJUCLu1oFehQZdPYOCqU=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=SX11B9GMtbF3PUSozEbkWjJ164vGarE89iQfBCWwmyi5lVB2DuAD3cDbtYlCv5WFwmkjW5UIeTDxKxSHYJ6EhLGqnF+C48QM1Nx0ex8isvYEfbQkVwGNXt6iRnZ2yw+yayXSZFNIN3ghI0qGiyB2feIwQVqiiL8189kwoRhU4CI= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=VBXtXRDW; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="VBXtXRDW" Received: by smtp.kernel.org (Postfix) with ESMTPSA id D236BC4CEE6; Wed, 26 Feb 2025 02:15:11 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1740536111; bh=Bd4Z/t3H22YuLE4scNV+b5vbJUCLu1oFehQZdPYOCqU=; h=From:To:Cc:Subject:Date:Reply-to:From; b=VBXtXRDWwQ0EoRwA1pKzAu/XVblX0zyVqOLzZtSyNho9hfyrtq9awBJnzOj1dLcpm f14HHawqwjWFbqem3uD1V1w0TGlxqm/WAjB+M1IXKWZFVnnXluFdQ6bnlU1BnhzkUM /pRViTbyeLll3qGlo0bMHuzonp4E4VMajEvESR1U= From: Greg Kroah-Hartman To: linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman Subject: CVE-2022-49508: HID: elan: Fix potential double free in elan_input_configured Date: Wed, 26 Feb 2025 03:13:02 +0100 Message-ID: <2025022609-CVE-2022-49508-c351@gregkh> X-Mailer: git-send-email 2.48.1 Precedence: bulk X-Mailing-List: linux-cve-announce@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Reply-to: , X-Developer-Signature: v=1; a=openpgp-sha256; l=3318; i=gregkh@linuxfoundation.org; h=from:subject:message-id; bh=Bd4Z/t3H22YuLE4scNV+b5vbJUCLu1oFehQZdPYOCqU=; b=owGbwMvMwCRo6H6F97bub03G02pJDOn7Khg/n+gScvyfdf/5xVLmvzNWvbpRIPZVUWu/96w4f qFVvu47OmJZGASZGGTFFFm+bOM5ur/ikKKXoe1pmDmsTCBDGLg4BWAiIbwM84yv9q9i5DzmPePC U7NDal53XcMkdzHMT+aZ3Py7LkdrUeKFfyGshT9mrjj9CAA= X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Content-Transfer-Encoding: 8bit Description =========== In the Linux kernel, the following vulnerability has been resolved: HID: elan: Fix potential double free in elan_input_configured 'input' is a managed resource allocated with devm_input_allocate_device(), so there is no need to call input_free_device() explicitly or there will be a double free. According to the doc of devm_input_allocate_device(): * Managed input devices do not need to be explicitly unregistered or * freed as it will be done automatically when owner device unbinds from * its driver (or binding fails). The Linux kernel CVE team has assigned CVE-2022-49508 to this issue. Affected and fixed versions =========================== Issue introduced in 4.17 with commit 9a6a4193d65b853020ef0e66cecdf9e64a863883 and fixed in 4.19.247 with commit c92ec22a991778a096342cf1a917ae36c5c86a90 Issue introduced in 4.17 with commit 9a6a4193d65b853020ef0e66cecdf9e64a863883 and fixed in 5.4.198 with commit f1d4f19a796551edc6679a681ea1756b8c578c08 Issue introduced in 4.17 with commit 9a6a4193d65b853020ef0e66cecdf9e64a863883 and fixed in 5.10.121 with commit 6d0726725c7c560495f5ff364862a2cefea542e3 Issue introduced in 4.17 with commit 9a6a4193d65b853020ef0e66cecdf9e64a863883 and fixed in 5.15.46 with commit 24f9dfdaece9bd75bb8dbfdba83eddeefdf7dc47 Issue introduced in 4.17 with commit 9a6a4193d65b853020ef0e66cecdf9e64a863883 and fixed in 5.17.14 with commit 5291451851feeb66fd4bf0826710f482f3b1ab38 Issue introduced in 4.17 with commit 9a6a4193d65b853020ef0e66cecdf9e64a863883 and fixed in 5.18.3 with commit 8bb1716507ebf12d50bbf181764481de3b6bc7fd Issue introduced in 4.17 with commit 9a6a4193d65b853020ef0e66cecdf9e64a863883 and fixed in 5.19 with commit 1af20714fedad238362571620be0bd690ded05b6 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2022-49508 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/hid/hid-elan.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/c92ec22a991778a096342cf1a917ae36c5c86a90 https://git.kernel.org/stable/c/f1d4f19a796551edc6679a681ea1756b8c578c08 https://git.kernel.org/stable/c/6d0726725c7c560495f5ff364862a2cefea542e3 https://git.kernel.org/stable/c/24f9dfdaece9bd75bb8dbfdba83eddeefdf7dc47 https://git.kernel.org/stable/c/5291451851feeb66fd4bf0826710f482f3b1ab38 https://git.kernel.org/stable/c/8bb1716507ebf12d50bbf181764481de3b6bc7fd https://git.kernel.org/stable/c/1af20714fedad238362571620be0bd690ded05b6