CVE-2024-58020

MediumCVSS 5.5

Published: 27/02/2025(UTC)Updated: 14/07/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Summary

In the Linux kernel HID multitouch driver (mt_input_configured), the return value of devm_kasprintf() is not checked. This can lead to a NULL pointer dereference when memory allocation fails.

Risk Assessment

A local attacker could exploit this vulnerability to cause a kernel panic or potentially escalate privileges, destabilizing the system.

Recommendation

Apply the Linux kernel patch that adds a NULL check in mt_input_configured. Update your system to the latest stable kernel version.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Add NULL check in mt_input_configured devm_kasprintf() can return a NULL pointer on failure,but this returned value in mt_input_configured() is not checked. Add NULL check in mt_input_configured(), to handle kernel NULL pointer dereference error.