Memory Corruption Vulnerability in Linux Kernel's Input Handler for AppletB Keyboard

CVE-2025-38394

What is CVE-2025-38394?

A vulnerability in the Linux kernel's input handling code related to the appletb keyboard has been identified, allowing for potential memory corruption. This occurs when an input handler is registered but not correctly unregistered following a failure in the probing process. As a result, the input_handler_list may end up containing references to freed memory, leading to a use-after-free condition. This issue could cause erratic behavior and crashes when new input devices are connected, as the system attempts to traverse the corrupted list. The recommended fix includes ensuring that input handlers are properly unregistered using the input_unregister_handler() function to maintain system integrity and security.

References