Kernel Vulnerability in Linux Affects HID Winwing Product

CVE-2024-58021

Summary

A vulnerability exists in the Linux kernel related to the HID Winwing component. The issue arises in the winwing_init_led() function where the output of devm_kasprintf() is not checked for NULL values. This oversight could potentially lead to a NULL pointer dereference, exposing the system to stability issues and security risks. Implementing a NULL check in winwing_init_led() is necessary to safely handle such failures and bolster system resilience.

References