CVE-2022-49508
kernel: HID: elan: Fix potential double free in elan_input_configured
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · February 26, 2025
Updated · October 29, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
HID: elan: Fix potential double free in elan_input_configured
'input' is a managed resource allocated with devm_input_allocate_device(), so there is no need to call input_free_device() explicitly or there will be a double free.
According to the doc of devm_input_allocate_device():
- Managed input devices do not need to be explicitly unregistered or
- freed as it will be done automatically when owner device unbinds from
- its driver (or binding fails).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-415 · Double Free