In the Linux kernel, the following vulnerability has been resolved:
HID: multitouch: Correct devm device reference for hidinput input_dev name
Reference the HID device rather than the input device for the devm allocation of the inputdev name. Referencing the inputdev would lead to a use-after-free when the input_dev was unregistered and subsequently fires a uevent that depends on the name. At the point of firing the uevent, the name would be freed by devres management.
Use devmkasprintf to simplify the logic for allocating memory and formatting the inputdev name string.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53454.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53454.json"
[
{
"id": "CVE-2023-53454-063a1500",
"target": {
"file": "drivers/hid/hid-multitouch.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2763732ec1e68910719c75b6b896e11b6d3d622b",
"digest": {
"threshold": 0.9,
"line_hashes": [
"63498887350513382432249186515377197427",
"311089363547802202832004039813786270537",
"271200078576014310552103806211758544684",
"165204753619221779242067856945545056072",
"100212786974526206222824146571882674230",
"336030262508620123881247878911139567791",
"192389247199163955750069413995872015092",
"170987387451702682757580222956955585596",
"207273504285217517318887813957434778433",
"210577776380047110049285841509966689223",
"40655404034655540889217517855047869476",
"13524590191141805921222615211803297073",
"299273339514560127779941447006327011842",
"330353522603774043380160394272975924313",
"267868390585593816517915983992887850017",
"82206577457818089855400603167533838165"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53454-2e5c33fb",
"target": {
"function": "mt_input_configured",
"file": "drivers/hid/hid-multitouch.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b70ac7849248ec8128fa12f86e3655ba38838f29",
"digest": {
"function_hash": "317207435695030313320416107458879666106",
"length": 1270.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53454-3521ec37",
"target": {
"file": "drivers/hid/hid-multitouch.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@15ec7cb55e7d88755aa01d44a7a1015a42bfce86",
"digest": {
"threshold": 0.9,
"line_hashes": [
"63498887350513382432249186515377197427",
"311089363547802202832004039813786270537",
"271200078576014310552103806211758544684",
"165204753619221779242067856945545056072",
"100212786974526206222824146571882674230",
"336030262508620123881247878911139567791",
"192389247199163955750069413995872015092",
"170987387451702682757580222956955585596",
"207273504285217517318887813957434778433",
"210577776380047110049285841509966689223",
"40655404034655540889217517855047869476",
"13524590191141805921222615211803297073",
"299273339514560127779941447006327011842",
"330353522603774043380160394272975924313",
"267868390585593816517915983992887850017",
"82206577457818089855400603167533838165"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53454-58f46469",
"target": {
"file": "drivers/hid/hid-multitouch.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@df7ca43fe090e1a56c216c8ebc106ef5fd49afc6",
"digest": {
"threshold": 0.9,
"line_hashes": [
"63498887350513382432249186515377197427",
"311089363547802202832004039813786270537",
"271200078576014310552103806211758544684",
"165204753619221779242067856945545056072",
"100212786974526206222824146571882674230",
"336030262508620123881247878911139567791",
"192389247199163955750069413995872015092",
"170987387451702682757580222956955585596",
"207273504285217517318887813957434778433",
"210577776380047110049285841509966689223",
"40655404034655540889217517855047869476",
"13524590191141805921222615211803297073",
"299273339514560127779941447006327011842",
"330353522603774043380160394272975924313",
"267868390585593816517915983992887850017",
"82206577457818089855400603167533838165"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53454-5e1ecd3c",
"target": {
"function": "mt_input_configured",
"file": "drivers/hid/hid-multitouch.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@15ec7cb55e7d88755aa01d44a7a1015a42bfce86",
"digest": {
"function_hash": "89162240660608153285986653857325198145",
"length": 1319.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53454-75e05321",
"target": {
"function": "mt_input_configured",
"file": "drivers/hid/hid-multitouch.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39c70c19456e50dcb3abfe53539220dff0490f1d",
"digest": {
"function_hash": "105793125109271741296818161780320073796",
"length": 1313.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53454-7c3a9351",
"target": {
"function": "mt_input_configured",
"file": "drivers/hid/hid-multitouch.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2763732ec1e68910719c75b6b896e11b6d3d622b",
"digest": {
"function_hash": "317207435695030313320416107458879666106",
"length": 1270.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53454-7d9efd33",
"target": {
"file": "drivers/hid/hid-multitouch.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4794394635293a3e74591351fff469cea7ad15a2",
"digest": {
"threshold": 0.9,
"line_hashes": [
"63498887350513382432249186515377197427",
"311089363547802202832004039813786270537",
"271200078576014310552103806211758544684",
"165204753619221779242067856945545056072",
"100212786974526206222824146571882674230",
"336030262508620123881247878911139567791",
"192389247199163955750069413995872015092",
"170987387451702682757580222956955585596",
"207273504285217517318887813957434778433",
"210577776380047110049285841509966689223",
"40655404034655540889217517855047869476",
"13524590191141805921222615211803297073",
"299273339514560127779941447006327011842",
"330353522603774043380160394272975924313",
"267868390585593816517915983992887850017",
"82206577457818089855400603167533838165"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53454-8632df1e",
"target": {
"file": "drivers/hid/hid-multitouch.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39c70c19456e50dcb3abfe53539220dff0490f1d",
"digest": {
"threshold": 0.9,
"line_hashes": [
"63498887350513382432249186515377197427",
"311089363547802202832004039813786270537",
"271200078576014310552103806211758544684",
"165204753619221779242067856945545056072",
"100212786974526206222824146571882674230",
"336030262508620123881247878911139567791",
"192389247199163955750069413995872015092",
"170987387451702682757580222956955585596",
"207273504285217517318887813957434778433",
"210577776380047110049285841509966689223",
"40655404034655540889217517855047869476",
"13524590191141805921222615211803297073",
"299273339514560127779941447006327011842",
"330353522603774043380160394272975924313",
"267868390585593816517915983992887850017",
"82206577457818089855400603167533838165"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53454-a4a35376",
"target": {
"file": "drivers/hid/hid-multitouch.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b70ac7849248ec8128fa12f86e3655ba38838f29",
"digest": {
"threshold": 0.9,
"line_hashes": [
"63498887350513382432249186515377197427",
"311089363547802202832004039813786270537",
"271200078576014310552103806211758544684",
"165204753619221779242067856945545056072",
"100212786974526206222824146571882674230",
"336030262508620123881247878911139567791",
"192389247199163955750069413995872015092",
"170987387451702682757580222956955585596",
"207273504285217517318887813957434778433",
"210577776380047110049285841509966689223",
"40655404034655540889217517855047869476",
"13524590191141805921222615211803297073",
"299273339514560127779941447006327011842",
"330353522603774043380160394272975924313",
"267868390585593816517915983992887850017",
"82206577457818089855400603167533838165"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53454-c13d42c9",
"target": {
"function": "mt_input_configured",
"file": "drivers/hid/hid-multitouch.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@df7ca43fe090e1a56c216c8ebc106ef5fd49afc6",
"digest": {
"function_hash": "89162240660608153285986653857325198145",
"length": 1319.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53454-caa17e80",
"target": {
"function": "mt_input_configured",
"file": "drivers/hid/hid-multitouch.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac0d389402a6ff9ad92cea02c2d8c711483b91ab",
"digest": {
"function_hash": "339140155451970127766045976316541460327",
"length": 1348.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53454-e1784b51",
"target": {
"function": "mt_input_configured",
"file": "drivers/hid/hid-multitouch.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4794394635293a3e74591351fff469cea7ad15a2",
"digest": {
"function_hash": "317207435695030313320416107458879666106",
"length": 1270.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53454-ec0a90de",
"target": {
"function": "mt_input_configured",
"file": "drivers/hid/hid-multitouch.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d7833db9fd118415dace2ca157bfa603dec9c8c",
"digest": {
"function_hash": "317207435695030313320416107458879666106",
"length": 1270.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53454-f3804336",
"target": {
"file": "drivers/hid/hid-multitouch.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac0d389402a6ff9ad92cea02c2d8c711483b91ab",
"digest": {
"threshold": 0.9,
"line_hashes": [
"63498887350513382432249186515377197427",
"311089363547802202832004039813786270537",
"332495068687614252023723572452834566066",
"323011368454352296241231086611214610319",
"107886982005381267259224525310219807759",
"78229358851106001484392184792966575441",
"192389247199163955750069413995872015092",
"170987387451702682757580222956955585596",
"207273504285217517318887813957434778433",
"210577776380047110049285841509966689223",
"40655404034655540889217517855047869476",
"13524590191141805921222615211803297073",
"299273339514560127779941447006327011842",
"330353522603774043380160394272975924313",
"267868390585593816517915983992887850017",
"82206577457818089855400603167533838165"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53454-fdfec192",
"target": {
"file": "drivers/hid/hid-multitouch.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d7833db9fd118415dace2ca157bfa603dec9c8c",
"digest": {
"threshold": 0.9,
"line_hashes": [
"63498887350513382432249186515377197427",
"311089363547802202832004039813786270537",
"271200078576014310552103806211758544684",
"165204753619221779242067856945545056072",
"100212786974526206222824146571882674230",
"336030262508620123881247878911139567791",
"192389247199163955750069413995872015092",
"170987387451702682757580222956955585596",
"207273504285217517318887813957434778433",
"210577776380047110049285841509966689223",
"40655404034655540889217517855047869476",
"13524590191141805921222615211803297073",
"299273339514560127779941447006327011842",
"330353522603774043380160394272975924313",
"267868390585593816517915983992887850017",
"82206577457818089855400603167533838165"
]
},
"signature_type": "Line"
}
]