Input: i8042 - fix leaking of platform device on module removal (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.22 % · percentile 12 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Analyzed
Description
In the Linux kernel, the following vulnerability has been resolved: Input: i8042 - fix leaking of platform device on module removal Avoid resetting the module-wide i8042_platform_device pointer in i8042_probe() or i8042_remove(), so that the device can be properly destroyed by i8042_exit() on module unload.
Weaknesses (CWE)
- CWE-401 — Missing Release of Memory after Effective Lifetime
References
- https://git.kernel.org/stable/c/81df118e79b2136b5c016394f67a051dc508b7b6
- https://git.kernel.org/stable/c/4f348b60c79671eee33c1389efe89109c93047da
- https://git.kernel.org/stable/c/3f25add5ecf88de0f8ff2b27b6c0731a1f1b38ed
- https://git.kernel.org/stable/c/d5f7f6e63fed9c2ed09725d90059a28907e197e3
- https://git.kernel.org/stable/c/a32cd7feb0127bf629a82686b6e2c128139a86e5
- https://git.kernel.org/stable/c/81cd7e8489278d28794e7b272950c3e00c344e44
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2025-13001
- GCVE · GCVE-0-2022-49777
CERT-FR advisories
- CERTFR-2026-AVI-0081 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-1009 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0587 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0560 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0529 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0509 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.19.224 < 4.19.267cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.4.170 < 5.4.225cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.10.90 < 5.10.156cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.15.13 < 5.15.80cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.16.1 < 6.0.10cpe:2.3:o:linux:linux_kernel:5.16:-:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.16:rc7:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.16:rc8:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 68fdb0499653a2519691e645fcb72944f6e1e220 < 81df118e79b2136b5c016394f67a051dc508b7b6 ; affected f93d5dca7d84a4c725acf87db74b12c5686bd83e < 4f348b60c79671eee33c1389efe89109c93047da ; affected bb672eff7447f8a26c8a66ddee613afd279bd760 < 3f25add5ecf88de0f8ff2b27b6c0731a1f1b38ed ; affected dd33054e4c18a54645072c7a62d46cdf6d05dace < d5f7f6e63fed9c2ed09725d90059a28907e197e3 ; affected 9222ba68c3f4065f6364b99cc641b6b019ef2d42 < a32cd7feb0127bf629a82686b6e2c128139a86e5 ; affected 9222ba68c3f4065f6364b99cc641b6b019ef2d42 < 81cd7e8489278d28794e7b272950c3e00c344e44 |
| Linux · Linux | affected 5.16 ; unaffected 0 < 5.16 ; unaffected 4.19.267 ≤ 4.19.* ; unaffected 5.4.225 ≤ 5.4.* ; unaffected 5.10.156 ≤ 5.10.* ; unaffected 5.15.80 ≤ 5.15.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |