In the Linux kernel, the following vulnerability has been resolved:
Input: appletouch - initialize work before device registration
Syzbot has reported warning in __flush_work(). This warning is caused by
work->func == NULL, which means missing work initialization.
This may happen, since input_dev->close() calls
cancel_work_sync(&dev->work), but dev->work initalization happens _after_
input_register_device() call.
So this patch moves dev->work initialization before registering input
device
Metrics
Affected Vendors & Products
References
History
Mon, 04 Nov 2024 12:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: Linux
Published: 2024-02-27T09:44:00.108Z
Updated: 2024-12-19T07:32:04.021Z
Reserved: 2024-02-25T13:45:52.720Z
Link: CVE-2021-46932
Vulnrichment
Updated: 2024-08-04T05:17:42.851Z
NVD
Status : Modified
Published: 2024-02-27T10:15:07.753
Modified: 2024-11-21T06:34:57.780
Link: CVE-2021-46932
Redhat