HID: wacom: stop hardware after post-start probe failures
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.8epss 0.3%
exploitation probability
0.3%top 82% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved:
HID: wacom: stop hardware after post-start probe failures
wacom_parse_and_register() starts HID hardware before registering inputs
and initializing pad LEDs/remotes. Those later steps can fail, but their
error paths currently release Wacom resources without stopping the HID
hardware.
Route post-hid_hw_start() failures through hid_hw_stop() before
releasing driver resources.
This issue was identified during our ongoing static-analysis research while
reviewing kernel code.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Linux · LinuxReferences
https://git.kernel.org/stable/c/1a1ebdcb56ae58a0ee2c54dd15d75121e30424e3https://git.kernel.org/stable/c/3e6473a4f0596182acdda5219b4bebfbee76514fhttps://git.kernel.org/stable/c/416095e9a6037b4b39fcadd0d2bd77a8852211echttps://git.kernel.org/stable/c/46d8b8c85ae0589fb85746a64e8908160e52aac3https://git.kernel.org/stable/c/5a7ca028facf04921b2c1c2e4d1ee7f282510555https://git.kernel.org/stable/c/75eb2173b63ab41c24d80cd641af18f3c117a267https://git.kernel.org/stable/c/e2cc711a9df37f359159b21db56cea9c21f58a9chttps://git.kernel.org/stable/c/ec2612b8ad9e642596db011dd8b6568ef1edeaa1