CVE-2024-57986

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections

A report in 2019 by the syzbot fuzzer was found to be connected to two

errors in the HID core associated with Resolution Multipliers. One of

the errors was fixed by commit ea427a222d8b ("HID: core: Fix deadloop

in hid_apply_multiplier."), but the other has not been fixed.

This error arises because hid_apply_multipler() assumes that every

Resolution Multiplier control is contained in a Logical Collection,

i.e., there's no way the routine can ever set multiplier_collection to

NULL. This is in spite of the fact that the function starts with a

big comment saying:

* "The Resolution Multiplier control must be contained in the same

* Logical Collection as the control(s) to which it is to be applied.

...

* If no Logical Collection is

* defined, the Resolution Multiplier is associated with all

* controls in the report."

*

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References