Multitouch Handling Vulnerability in Linux Kernel

CVE-2024-58020

Summary

In the Linux kernel, a vulnerability in the multitouch handling code can lead to potential NULL pointer dereference. Specifically, the function mt_input_configured fails to check the return value of devm_kasprintf(), which may yield a NULL pointer on error. This oversight can result in unpredictable behavior and system instability. The vulnerability has been addressed with an added check to ensure safe handling of this potential error, thereby enhancing the robustness of the kernel's multitouch support.

References