diff options
| author | Jiri Kosina <jkosina@suse.com> | 2026-06-12 18:48:22 +0300 |
|---|---|---|
| committer | Jiri Kosina <jkosina@suse.com> | 2026-06-15 15:57:04 +0300 |
| commit | 6df6b1f2c49678211f65647c300bc51dda02893b (patch) | |
| tree | f2d8f9f80523a134932f4004a98d114078310fa3 /include/linux/workqueue.h | |
| parent | b7799c3b6aa8f08dd9918eb4637af4ac21cf90f2 (diff) | |
| download | linux-6df6b1f2c49678211f65647c300bc51dda02893b.tar.xz | |
HID: hidpp: fix potential UAF in hidpp_connect_event()
If input_register_device() fails, we call input_free_device(), but keep
stale pointer to the old device in hidpp->input, which could potentially
lead to UAF. Fix that by resetting it to NULL before returning from
hidpp_connect_event().
Reported-by: zdi-disclosures@trendmicro.com
Signed-off-by: Jiri Kosina <jkosina@suse.com>
Diffstat (limited to 'include/linux/workqueue.h')
0 files changed, 0 insertions, 0 deletions