In the Linux kernel, the following vulnerability has been resolved:
Input: MT - limit max slots
syzbot is reporting too large allocation at inputmtinitslots(), for numslots is supplied from userspace using ioctl(UIDEVCREATE).
Since nobody knows possible max slots, this patch chose 1024.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/45xxx/CVE-2024-45008.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-45008.json"
[
{
"signature_version": "v1",
"target": {
"file": "drivers/input/input-mt.c",
"function": "input_mt_init_slots"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@99d3bf5f7377d42f8be60a6b9cb60fb0be34dceb",
"deprecated": false,
"digest": {
"function_hash": "269627090784414011150333888870375232408",
"length": 1708.0
},
"id": "CVE-2024-45008-6c0d06b3",
"signature_type": "Function"
},
{
"signature_version": "v1",
"target": {
"file": "drivers/input/input-mt.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@99d3bf5f7377d42f8be60a6b9cb60fb0be34dceb",
"deprecated": false,
"digest": {
"line_hashes": [
"105842947248864849478096889214141494516",
"88156182160366898325883813067447109585",
"304901658798646676593841028432056279161",
"161605709455179298248881711988904694158"
],
"threshold": 0.9
},
"id": "CVE-2024-45008-7bd9b421",
"signature_type": "Line"
}
]