CVE-2024-58020: Linux kernel · HID: multitouch: Add NULL check in mt_input_configured
Affects Linux kernelSource GCVE Database
Not known to be exploited.
Data as of 10 Nov 2026, 14:48 UTC
Rated Low by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
Thin evidence
One scorer or noneExploitation evidence
Disclosed: evidence found.
CVE published 27 Feb 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 10 Nov 2026.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Linux Linux | Affected
| Fixed in– |
AI-suggested
A fix has been implemented in the Linux kernel by adding a NULL check in mt_input_configured. Users should update to the fixed kernel versions listed to mitigate this issue.
Description
A NULL pointer dereference vulnerability was fixed in the Linux kernel's HID multitouch driver. The function mt_input_configured did not check the return value of devm_kasprintf(), which can return NULL on failure, potentially leading to a kernel NULL pointer dereference error.
References
- git.kernel.org/stable/c/a04d96ef67a42165f93194eef22a270acba4b74c (opens in a new tab)
- git.kernel.org/stable/c/a6bfd3856e9f3da083f177753c623d58ba935e0a (opens in a new tab)
- git.kernel.org/stable/c/2052b44cd0a62b6fdbe3371e5ba6029c56c400ca (opens in a new tab)
- git.kernel.org/stable/c/4e7113f591163d99adc7cbcd7295030c8c5d3fc7 (opens in a new tab)
- git.kernel.org/stable/c/62f8bf06262b6fc55c58f4c5256140f1382f3b01 (opens in a new tab)
- git.kernel.org/stable/c/aa879ef6d3acf96fa2c7122d0632061d4ea58d48 (opens in a new tab)
- git.kernel.org/stable/c/97c09cc2e72769edb6994b531edcfa313b96bade (opens in a new tab)
- git.kernel.org/stable/c/9b8e2220d3a052a690b1d1b23019673e612494c5 (opens in a new tab)
- lists.debian.org/debian-lts-announce/2025/05/msg00030.html (opens in a new tab)
- lists.debian.org/debian-lts-announce/2025/03/msg00028.html (opens in a new tab)
- cert-portal.siemens.com/productcert/html/ssa-265688.html (opens in a new tab)
- cert-portal.siemens.com/productcert/html/ssa-019113.html (opens in a new tab)
- cert-portal.siemens.com/productcert/html/ssa-457936.html (opens in a new tab)
- cert-portal.siemens.com/productcert/html/ssa-784472.html (opens in a new tab)