Executive brief
A vulnerability was identified in the Linux kernel's Logitech input device driver. This flaw could allow a local user to cause a memory leak, which over time may lead to system instability or a crash (denial of service). The issue specifically affects systems using Logitech Unifying receivers or similar HID devices.
Technical details
A memory leak exists in the logitech-dj HID driver, specifically within the logi_dj_recv_switch_to_dj_mode() function. The vulnerability is triggered when logi_dj_recv_send_report() encounters an error; the allocated 'dj_report' memory is not freed on the error exit path. A local attacker with low privileges could potentially exploit this to exhaust system memory, leading to a denial of service. The issue has been resolved by adding a kfree(dj_report) call in the error handling block.
Affected products
- Linux Linux Kernel 5.4.257 to 5.4.279, 5.10.195 to 5.10.221, 5.15.132 to 5.15.162, 6.1.53 to 6.1.95, 6.6 to 6.6.35, 6.7 to 6.9.6
Timeline
- 2024-05-24: other: Vulnerability fixed in source code
- 2024-07-12: disclosed: CVE published
- 2024-07-12: advisory
References
- https://git.kernel.org/stable/c/15122dc140d82c51c216535c57b044c4587aae45
- https://git.kernel.org/stable/c/1df2ead5dfad5f8f92467bd94889392d53100b98
- https://git.kernel.org/stable/c/789c99a1d7d2c8f6096d75fc2930505840ec9ea0
- https://git.kernel.org/stable/c/a0503757947f2e46e59c1962326b53b3208c8213
- https://git.kernel.org/stable/c/caa9c9acb93db7ad7b74b157cf101579bac9596d
- https://git.kernel.org/stable/c/ce3af2ee95170b7d9e15fff6e500d67deab1e7b3
- https://git.kernel.org/stable/c/f677ca8cfefee2a729ca315f660cd4868abdf8de