In the Linux kernel, the following vulnerability has been resolved:
HID: multitouch: Correct devm device reference for hidinput input_dev name
Reference the HID device rather than the input device for the devm allocation of the inputdev name. Referencing the inputdev would lead to a use-after-free when the input_dev was unregistered and subsequently fires a uevent that depends on the name. At the point of firing the uevent, the name would be freed by devres management.
Use devmkasprintf to simplify the logic for allocating memory and formatting the inputdev name string.
{ "vanir_signatures": [ { "deprecated": false, "signature_type": "Line", "target": { "file": "drivers/hid/hid-multitouch.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "63498887350513382432249186515377197427", "311089363547802202832004039813786270537", "271200078576014310552103806211758544684", "165204753619221779242067856945545056072", "100212786974526206222824146571882674230", "336030262508620123881247878911139567791", "192389247199163955750069413995872015092", "170987387451702682757580222956955585596", "207273504285217517318887813957434778433", "210577776380047110049285841509966689223", "40655404034655540889217517855047869476", "13524590191141805921222615211803297073", "299273339514560127779941447006327011842", "330353522603774043380160394272975924313", "267868390585593816517915983992887850017", "82206577457818089855400603167533838165" ], "threshold": 0.9 }, "id": "CVE-2023-53454-063a1500", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2763732ec1e68910719c75b6b896e11b6d3d622b" }, { "deprecated": false, "signature_type": "Function", "target": { "file": "drivers/hid/hid-multitouch.c", "function": "mt_input_configured" }, "signature_version": "v1", "digest": { "length": 1270.0, "function_hash": "317207435695030313320416107458879666106" }, "id": "CVE-2023-53454-2e5c33fb", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b70ac7849248ec8128fa12f86e3655ba38838f29" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "drivers/hid/hid-multitouch.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "63498887350513382432249186515377197427", "311089363547802202832004039813786270537", "271200078576014310552103806211758544684", "165204753619221779242067856945545056072", "100212786974526206222824146571882674230", "336030262508620123881247878911139567791", "192389247199163955750069413995872015092", "170987387451702682757580222956955585596", "207273504285217517318887813957434778433", "210577776380047110049285841509966689223", "40655404034655540889217517855047869476", "13524590191141805921222615211803297073", "299273339514560127779941447006327011842", "330353522603774043380160394272975924313", "267868390585593816517915983992887850017", "82206577457818089855400603167533838165" ], "threshold": 0.9 }, "id": "CVE-2023-53454-3521ec37", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@15ec7cb55e7d88755aa01d44a7a1015a42bfce86" }, { "deprecated": false, "signature_type": "Function", "target": { "file": "drivers/hid/hid-multitouch.c", "function": "mt_input_configured" }, "signature_version": "v1", "digest": { "length": 1319.0, "function_hash": "89162240660608153285986653857325198145" }, "id": "CVE-2023-53454-5e1ecd3c", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@15ec7cb55e7d88755aa01d44a7a1015a42bfce86" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "drivers/hid/hid-multitouch.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "63498887350513382432249186515377197427", "311089363547802202832004039813786270537", "271200078576014310552103806211758544684", "165204753619221779242067856945545056072", "100212786974526206222824146571882674230", "336030262508620123881247878911139567791", "192389247199163955750069413995872015092", "170987387451702682757580222956955585596", "207273504285217517318887813957434778433", "210577776380047110049285841509966689223", "40655404034655540889217517855047869476", "13524590191141805921222615211803297073", "299273339514560127779941447006327011842", "330353522603774043380160394272975924313", "267868390585593816517915983992887850017", "82206577457818089855400603167533838165" ], "threshold": 0.9 }, "id": "CVE-2023-53454-61ff30f6", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dde88ab4e45beb60b217026207aa9c14c88d71ab" }, { "deprecated": false, "signature_type": "Function", "target": { "file": "drivers/hid/hid-multitouch.c", "function": "mt_input_configured" }, "signature_version": "v1", "digest": { "length": 1313.0, "function_hash": "105793125109271741296818161780320073796" }, "id": "CVE-2023-53454-75e05321", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39c70c19456e50dcb3abfe53539220dff0490f1d" }, { "deprecated": false, "signature_type": "Function", "target": { "file": "drivers/hid/hid-multitouch.c", "function": "mt_input_configured" }, "signature_version": "v1", "digest": { "length": 1270.0, "function_hash": "317207435695030313320416107458879666106" }, "id": "CVE-2023-53454-7c3a9351", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2763732ec1e68910719c75b6b896e11b6d3d622b" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "drivers/hid/hid-multitouch.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "63498887350513382432249186515377197427", "311089363547802202832004039813786270537", "271200078576014310552103806211758544684", "165204753619221779242067856945545056072", "100212786974526206222824146571882674230", "336030262508620123881247878911139567791", "192389247199163955750069413995872015092", "170987387451702682757580222956955585596", "207273504285217517318887813957434778433", "210577776380047110049285841509966689223", "40655404034655540889217517855047869476", "13524590191141805921222615211803297073", "299273339514560127779941447006327011842", "330353522603774043380160394272975924313", "267868390585593816517915983992887850017", "82206577457818089855400603167533838165" ], "threshold": 0.9 }, "id": "CVE-2023-53454-7d9efd33", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4794394635293a3e74591351fff469cea7ad15a2" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "drivers/hid/hid-multitouch.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "63498887350513382432249186515377197427", "311089363547802202832004039813786270537", "271200078576014310552103806211758544684", "165204753619221779242067856945545056072", "100212786974526206222824146571882674230", "336030262508620123881247878911139567791", "192389247199163955750069413995872015092", "170987387451702682757580222956955585596", "207273504285217517318887813957434778433", "210577776380047110049285841509966689223", "40655404034655540889217517855047869476", "13524590191141805921222615211803297073", "299273339514560127779941447006327011842", "330353522603774043380160394272975924313", "267868390585593816517915983992887850017", "82206577457818089855400603167533838165" ], "threshold": 0.9 }, "id": "CVE-2023-53454-8632df1e", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39c70c19456e50dcb3abfe53539220dff0490f1d" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "drivers/hid/hid-multitouch.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "63498887350513382432249186515377197427", "311089363547802202832004039813786270537", "271200078576014310552103806211758544684", "165204753619221779242067856945545056072", "100212786974526206222824146571882674230", "336030262508620123881247878911139567791", "192389247199163955750069413995872015092", "170987387451702682757580222956955585596", "207273504285217517318887813957434778433", "210577776380047110049285841509966689223", "40655404034655540889217517855047869476", "13524590191141805921222615211803297073", "299273339514560127779941447006327011842", "330353522603774043380160394272975924313", "267868390585593816517915983992887850017", "82206577457818089855400603167533838165" ], "threshold": 0.9 }, "id": "CVE-2023-53454-a4a35376", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b70ac7849248ec8128fa12f86e3655ba38838f29" }, { "deprecated": false, "signature_type": "Function", "target": { "file": "drivers/hid/hid-multitouch.c", "function": "mt_input_configured" }, "signature_version": "v1", "digest": { "length": 1319.0, "function_hash": "89162240660608153285986653857325198145" }, "id": "CVE-2023-53454-b70cac19", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dde88ab4e45beb60b217026207aa9c14c88d71ab" }, { "deprecated": false, "signature_type": "Function", "target": { "file": "drivers/hid/hid-multitouch.c", "function": "mt_input_configured" }, "signature_version": "v1", "digest": { "length": 1348.0, "function_hash": "339140155451970127766045976316541460327" }, "id": "CVE-2023-53454-caa17e80", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac0d389402a6ff9ad92cea02c2d8c711483b91ab" }, { "deprecated": false, "signature_type": "Function", "target": { "file": "drivers/hid/hid-multitouch.c", "function": "mt_input_configured" }, "signature_version": "v1", "digest": { "length": 1270.0, "function_hash": "317207435695030313320416107458879666106" }, "id": "CVE-2023-53454-e1784b51", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4794394635293a3e74591351fff469cea7ad15a2" }, { "deprecated": false, "signature_type": "Function", "target": { "file": "drivers/hid/hid-multitouch.c", "function": "mt_input_configured" }, "signature_version": "v1", "digest": { "length": 1270.0, "function_hash": "317207435695030313320416107458879666106" }, "id": "CVE-2023-53454-ec0a90de", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d7833db9fd118415dace2ca157bfa603dec9c8c" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "drivers/hid/hid-multitouch.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "63498887350513382432249186515377197427", "311089363547802202832004039813786270537", "332495068687614252023723572452834566066", "323011368454352296241231086611214610319", "107886982005381267259224525310219807759", "78229358851106001484392184792966575441", "192389247199163955750069413995872015092", "170987387451702682757580222956955585596", "207273504285217517318887813957434778433", "210577776380047110049285841509966689223", "40655404034655540889217517855047869476", "13524590191141805921222615211803297073", "299273339514560127779941447006327011842", "330353522603774043380160394272975924313", "267868390585593816517915983992887850017", "82206577457818089855400603167533838165" ], "threshold": 0.9 }, "id": "CVE-2023-53454-f3804336", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac0d389402a6ff9ad92cea02c2d8c711483b91ab" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "drivers/hid/hid-multitouch.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "63498887350513382432249186515377197427", "311089363547802202832004039813786270537", "271200078576014310552103806211758544684", "165204753619221779242067856945545056072", "100212786974526206222824146571882674230", "336030262508620123881247878911139567791", "192389247199163955750069413995872015092", "170987387451702682757580222956955585596", "207273504285217517318887813957434778433", "210577776380047110049285841509966689223", "40655404034655540889217517855047869476", "13524590191141805921222615211803297073", "299273339514560127779941447006327011842", "330353522603774043380160394272975924313", "267868390585593816517915983992887850017", "82206577457818089855400603167533838165" ], "threshold": 0.9 }, "id": "CVE-2023-53454-fdfec192", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d7833db9fd118415dace2ca157bfa603dec9c8c" } ] }