HID: usbhid: free raw_report buffers in usbhid_stop
Summary
GSD-2021-1001496: HID: usbhid: free raw_report buffers in usbhid_stop. Affects Kernel versions < 7ce4e49146612261265671b1d30d117139021030. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The HID (Human Interface Device) module in the Linux Kernel is responsible for handling input devices such as keyboards, mice, and game controllers. It provides a standardized interface for these devices to communicate with the operating system. The usbhid driver is specifically designed for USB HID devices. It allows the kernel to recognize and interact with USB HID devices connected to the system.
Vulnerability Detail
The usbhid driver in the Linux Kernel prior to version v4.4.286 does not properly free raw_report buffers in the usbhid_stop function. This vulnerability could potentially be exploited by an attacker with physical access to the system or by a malicious USB device. By sending specially crafted input reports, an attacker could trigger a use-after-free condition, leading to a kernel memory corruption or a system crash. The impact and attack plausibility of this vulnerability have not been proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability at this time.
Conclusion
The HID: usbhid: free raw_report buffers in usbhid_stop vulnerability in the Linux Kernel prior to version v4.4.286 could potentially be exploited to trigger a use-after-free condition and cause kernel memory corruption or system crashes. It is recommended to update the Linux Kernel to version v4.4.286 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The HID module is responsible for handling input devices such as keyboards, mice, and game controllers in the Linux Kernel. It provides a standardized interface for these devices to communicate with the operating system.
The usbhid driver is a specific driver in the Linux Kernel that is designed to handle USB HID devices. It allows the kernel to recognize and interact with USB HID devices connected to the system.
A use-after-free vulnerability occurs when a program or system continues to use a memory area after it has been freed. This can lead to memory corruption or crashes, and potentially be exploited by attackers to execute arbitrary code or gain unauthorized access.
An attacker with physical access to the system or a malicious USB device could exploit this vulnerability by sending specially crafted input reports to trigger a use-after-free condition in the usbhid driver. This could lead to kernel memory corruption or system crashes.
No, the impact and attack plausibility of this vulnerability have not been proven. This vulnerability is an automated ID intended to aid in the discovery of potential security vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
