Multitouch Handling Vulnerability in Linux Kernel

CVE-2024-58020

What is CVE-2024-58020?

In the Linux kernel, a vulnerability in the multitouch handling code can lead to potential NULL pointer dereference. Specifically, the function mt_input_configured fails to check the return value of devm_kasprintf(), which may yield a NULL pointer on error. This oversight can result in unpredictable behavior and system instability. The vulnerability has been addressed with an added check to ensure safe handling of this potential error, thereby enhancing the robustness of the kernel's multitouch support.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References