NetSight
IP …
medium5.5

CVE-2021-46932

In the Linux kernel, the following vulnerability has been resolved: Input: appletouch - initialize work before device registration Syzbot has reported warning …

Impact

In the Linux kernel, the following vulnerability has been resolved: Input: appletouch - initialize work before device registration Syzbot has reported warning in __flush_work(). This warning is caused by work->func == NULL, which means missing work initialization. This may happen, since input_dev->close() calls cancel_work_sync(&dev->work), but dev->work initalization happens _after_ input_register_device() call. So this patch moves dev->work initialization before registering input device

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.23 before 4.4.298
from 4.5.0 before 4.9.296
from 4.10.0 before 4.14.261
from 4.15.0 before 4.19.224
from 4.20.0 before 5.4.170
from 5.5.0 before 5.10.90

Weakness classification

CWE-665

References