CVE-2024-58020

Summary

CVE-2024-58020 is a newly identified vulnerability affecting the Linux kernel. This issue lies in the multitouch input driver, specifically in the function 'mt_input_configured'. The function devm_kasprintf() used within this function can return a NULL pointer upon failure. However, the returned value is not checked for nullity, leading to a potential kernel NULL pointer dereference error. This vulnerability could potentially be exploited by attackers to cause system crashes or gain unauthorized access, making it a significant security concern. The Linux community has released a patch to address this issue, mitigating the associated risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.