In the Linux kernel, the following vulnerability has been resolved:
HID: magicmouse: fix NULL-deref on disconnect
Commit 9d7b18668956 ("HID: magicmouse: add support for Apple Magic Trackpad 2") added a sanity check for an Apple trackpad but returned success instead of -ENODEV when the check failed. This means that the remove callback will dereference the never-initialised driver data pointer when the driver is later unbound (e.g. on USB disconnect).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-debuginfo | Aug 2, 2024 | Mar 15, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 15, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 15, 2024 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-preempt-develUpgrade kernel-sourceUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-preemptUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kernel-obs-build | Aug 9, 2024 | Mar 15, 2024 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-fipsUpgrade linux-hwe-5.4Upgrade linuxUpgrade linux-gkeopUpgrade linux-azure-fipsUpgrade linux-gcp-5.4Upgrade linux-gcpUpgrade linux-gcp-fipsUpgrade linux-aws-5.4Upgrade linux-oracleUpgrade linux-kvmUpgrade linux-bluefieldUpgrade linux-awsUpgrade linux-azureUpgrade linux-azure-5.4Upgrade linux-raspiUpgrade linux-oracle-5.4Upgrade linux-raspi-5.4 | Nov 19, 2024 | Mar 15, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub