In the Linux kernel, the following vulnerability has been resolved:
HID: magicmouse: fix NULL-deref on disconnect
Commit 9d7b18668956 ("HID: magicmouse: add support for Apple Magic Trackpad 2") added a sanity check for an Apple trackpad but returned success instead of -ENODEV when the check failed. This means that the remove callback will dereference the never-initialised driver data pointer when the driver is later unbound (e.g. on USB disconnect).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade bpftoolUpgrade perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Aug 2, 2024 | Mar 15, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 15, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 15, 2024 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kernel-obs-buildUpgrade kernel-preemptUpgrade kernel-docsUpgrade kernel-sourceUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-preempt-develUpgrade kernel-symsUpgrade kernel-64kb | Aug 9, 2024 | Mar 15, 2024 |
| Ubuntu | — | Upgrade linux-azureUpgrade linux-raspiUpgrade linux-kvmUpgrade linux-azure-5.4Upgrade linux-bluefieldUpgrade linux-awsUpgrade linux-oracleUpgrade linux-raspi-5.4Upgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-gkeopUpgrade linux-gcpUpgrade linux-hwe-5.4Upgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linux-gcp-fipsUpgrade linux-fipsUpgrade linuxUpgrade linux-aws-fips | Nov 19, 2024 | Mar 15, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub