Critical Crash Vulnerability in Linux Kernel's Synaptics Driver
Summary
DEBIAN-CVE-2025-21746: In the Linux kernel, the following vulnerability has been resolved: Input: synaptics - fix crash when enabling pass-through port When enabling a pass-through port an interrupt might come before psmouse driver binds to th... Affects linux versions < 6.12.17-1. Fixed in 6.12.17-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. The synaptics driver is responsible for handling input from touchpads and other pointing devices. This driver is crucial for ensuring smooth user interactions with devices that utilize touch-sensitive technology. However, a vulnerability has been identified that can lead to system crashes under specific conditions, highlighting the importance of maintaining up-to-date kernel versions.
Vulnerability Detail
In the Linux kernel, a vulnerability exists in the synaptics driver related to the handling of pass-through ports. When enabling a pass-through port, an interrupt may occur before the psmouse driver is bound to it. The synaptics sub-driver attempts to access the psmouse instance associated with the port to determine how to forward responses. If the psmouse instance is not yet attached, this can result in a crash. The vulnerability stems from inadequate checks before accessing the psmouse instance, which can lead to system instability and crashes.
How To Fix
Minimum fixed version
6.12.17-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The best course of action is to apply the patch by updating the Linux kernel to the fixed version.
Conclusion
The identified vulnerability in the Linux kernel's synaptics driver poses a significant risk of system crashes when enabling pass-through ports. Users are strongly advised to update to the patched version 6.12.17-1 or later to ensure system stability and security. Regular monitoring for vulnerabilities using tools like Vulert can help maintain the integrity of your software.
See every vulnerability recorded for linux →
FAQ
The vulnerability allows for a potential crash when enabling a pass-through port in the synaptics driver due to improper handling of psmouse instances.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Failure to address this vulnerability may lead to system crashes, resulting in potential data loss and interruptions in service.
Yes, the vulnerability affects the Linux kernel versions in Debian 13 and 14 prior to 6.12.17-1.
While there are no specific workarounds, it is crucial to plan for an update as soon as possible to mitigate the risk of crashes.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
