Riskcovery

CVE-2024-46745

Input: uinput - reject requests with unreasonable number of slots

State
Published
Severity
Not scored
Published
Sep 18, 2024
Updated
Oct 15, 2026
Reserved
Sep 11, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Input: uinput - reject requests with unreasonable number of slots

When exercising uinput interface syzkaller may try setting up device with a really large number of slots, which causes memory allocation failure in input_mt_init_slots(). While this allocation failure is handled properly and request is rejected, it results in syzkaller reports. Additionally, such request may put undue burden on the system which will try to free a lot of memory for a bogus request.

Fix it by limiting allowed number of slots to 100. This can easily be extended if we see devices that can track more than 100 contacts.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 38e7afe96c7c0ad900824911c61fdb04078033dc to before 9c6d189f0c1c59ba9a32326ec82a0b367a3cd47bAffected
  • 38e7afe96c7c0ad900824911c61fdb04078033dc to before 597ff930296c4c8fc6b6a536884d4f1a7187ec70Affected
  • 38e7afe96c7c0ad900824911c61fdb04078033dc to before 51fa08edd80003db700bdaa099385c5900d27f4bAffected
  • 38e7afe96c7c0ad900824911c61fdb04078033dc to before 9719687398dea8a6a12a10321a54dd75eec7ab2dAffected
  • 38e7afe96c7c0ad900824911c61fdb04078033dc to before 61df76619e270a46fd427fbdeb670ad491c42de2Affected
  • 38e7afe96c7c0ad900824911c61fdb04078033dc to before a4858b00a1ec57043697fb935565fe267f161833Affected
  • 38e7afe96c7c0ad900824911c61fdb04078033dc to before d76fc0f0b18d49b7e721c9e4975ef4bffde2f3e7Affected
  • 38e7afe96c7c0ad900824911c61fdb04078033dc to before 206f533a0a7c683982af473079c4111f4a0f9f5eAffected
LinuxLinux
  • 2.6.36Affected
  • before 2.6.36Not affected
  • 4.19.322 through 4.19.*Not affected
  • 5.4.284 through 5.4.*Not affected
  • 5.10.226 through 5.10.*Not affected
  • 5.15.167 through 5.15.*Not affected
  • 6.1.110 through 6.1.*Not affected
  • 6.6.51 through 6.6.*Not affected
  • 6.10.10 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.