CVE-2024-45008

A flaw was found in the Linux kernel's multi-touch input handling where the number of MT slots supplied through the UI_DEV_CREATE ioctl was not adequately bounded. A local user could provide an excessively large value, causing input_mt_init_slots() to perform an excessive kernel memory allocation. This could exhaust kernel memory and result in a denial of service. The issue was fixed by limiting the maximum number of MT slots to 1024.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.