In the Linux kernel, the following vulnerability has been resolved:
HID: winwing: Add NULL check in winwing_init_led()
devm_kasprintf() can return a NULL pointer on failure,but this returned value in winwing_init_led() is not checked. Add NULL check in winwing_init_led(), to handle kernel NULL pointer dereference error.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-1014-awsUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-oem-24.04bUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-genericUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-6.11.0-26-generic | May 21, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub