CVE-2024-45008

Input: MT - limit max slots

State: Published
Severity: Not scored
Published: Sep 4, 2024
Updated: May 11, 2026
Reserved: Aug 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

Input: MT - limit max slots

syzbot is reporting too large allocation at input_mt_init_slots(), for num_slots is supplied from userspace using ioctl(UI_DEV_CREATE).

Since nobody knows possible max slots, this patch chose 1024.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	38e7afe96c7c0ad900824911c61fdb04078033dc to before 2829c80614890624456337e47320289112785f3eAffected 38e7afe96c7c0ad900824911c61fdb04078033dc to before 87f610a1a7fbdb1f2e3d90b54c955bd3b8a0c322Affected 38e7afe96c7c0ad900824911c61fdb04078033dc to before 05dd9aabd04f9b5eb04dab9bb83d8c3e982d7549Affected 38e7afe96c7c0ad900824911c61fdb04078033dc to before 95f73d01f547dfc67fda3022c51e377a0454b505Affected 38e7afe96c7c0ad900824911c61fdb04078033dc to before 94736334b8a25e4fae8daa6934e54a31f099be43Affected 38e7afe96c7c0ad900824911c61fdb04078033dc to before 8f04edd554d191834e9e1349ef030318ea6b11baAffected 38e7afe96c7c0ad900824911c61fdb04078033dc to before cd19f1799c32ba7b874474b1b968815ce5364f73Affected 38e7afe96c7c0ad900824911c61fdb04078033dc to before 99d3bf5f7377d42f8be60a6b9cb60fb0be34dcebAffected
LinuxLinux	2.6.36Affected before 2.6.36Not affected 4.19.321 through 4.19.Not affected 5.4.283 through 5.4.Not affected 5.10.225 through 5.10.Not affected 5.15.166 through 5.15.Not affected 6.1.107 through 6.1.Not affected 6.6.48 through 6.6.Not affected 6.10.7 through 6.10.*Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

38e7afe96c7c0ad900824911c61fdb04078033dc to before 2829c80614890624456337e47320289112785f3eAffected
38e7afe96c7c0ad900824911c61fdb04078033dc to before 87f610a1a7fbdb1f2e3d90b54c955bd3b8a0c322Affected
38e7afe96c7c0ad900824911c61fdb04078033dc to before 05dd9aabd04f9b5eb04dab9bb83d8c3e982d7549Affected
38e7afe96c7c0ad900824911c61fdb04078033dc to before 95f73d01f547dfc67fda3022c51e377a0454b505Affected
38e7afe96c7c0ad900824911c61fdb04078033dc to before 94736334b8a25e4fae8daa6934e54a31f099be43Affected
38e7afe96c7c0ad900824911c61fdb04078033dc to before 8f04edd554d191834e9e1349ef030318ea6b11baAffected
38e7afe96c7c0ad900824911c61fdb04078033dc to before cd19f1799c32ba7b874474b1b968815ce5364f73Affected
38e7afe96c7c0ad900824911c61fdb04078033dc to before 99d3bf5f7377d42f8be60a6b9cb60fb0be34dcebAffected

LinuxLinux

2.6.36Affected
before 2.6.36Not affected
4.19.321 through 4.19.*Not affected
5.4.283 through 5.4.*Not affected
5.10.225 through 5.10.*Not affected
5.15.166 through 5.15.*Not affected
6.1.107 through 6.1.*Not affected
6.6.48 through 6.6.*Not affected
6.10.7 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.