Description
In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: Do not crash on missing msc->input Fake USB devices can send their own report descriptors for which the input_mapping() hook does not get called. In this case, msc->input stays NULL, leading to a crash at a later time. Detect this condition in the input_configured() hook and reject the device. This is not supposed to happen with actual magic mouse devices, but can be provoked by imposing as a magic mouse USB device.
Product status
64eb105d7f92fa48798106ac0d8bf17668eb2524 (git) before db5ba06e7af9325519a03e52fccf4a9e7c1fd9b2
64eb105d7f92fa48798106ac0d8bf17668eb2524 (git) before 165912d4321c692321c02793068d30700b4e0f1a
64eb105d7f92fa48798106ac0d8bf17668eb2524 (git) before f6a3860241fbb556fd72332fa31c5e787004413b
64eb105d7f92fa48798106ac0d8bf17668eb2524 (git) before 243e1165eb03aca97d87aafa9c3130593837a1c2
64eb105d7f92fa48798106ac0d8bf17668eb2524 (git) before 922bd3e498a4b8e445def6e6ffea2ad3682ad516
64eb105d7f92fa48798106ac0d8bf17668eb2524 (git) before 5bbe266272d86c0657e8253600f3d5b74fb7b2ae
64eb105d7f92fa48798106ac0d8bf17668eb2524 (git) before 36c83c1329dd881f290f7df2feadfb9a21775108
64eb105d7f92fa48798106ac0d8bf17668eb2524 (git) before 17abd396548035fbd6179ee1a431bd75d49676a7
2.6.37
Any version before 2.6.37
5.10.252 (semver)
5.15.202 (semver)
6.1.165 (semver)
6.6.128 (semver)
6.12.75 (semver)
6.18.16 (semver)
6.19.6 (semver)
7.0 (original_commit_for_fix)
References
git.kernel.org/...c/db5ba06e7af9325519a03e52fccf4a9e7c1fd9b2
git.kernel.org/...c/165912d4321c692321c02793068d30700b4e0f1a
git.kernel.org/...c/f6a3860241fbb556fd72332fa31c5e787004413b
git.kernel.org/...c/243e1165eb03aca97d87aafa9c3130593837a1c2
git.kernel.org/...c/922bd3e498a4b8e445def6e6ffea2ad3682ad516
git.kernel.org/...c/5bbe266272d86c0657e8253600f3d5b74fb7b2ae
git.kernel.org/...c/36c83c1329dd881f290f7df2feadfb9a21775108
git.kernel.org/...c/17abd396548035fbd6179ee1a431bd75d49676a7