SB20251001142 - Buffer overflow in Linux kernel hid driver
Published: October 1, 2025 Updated: October 27, 2025
Security Bulletin ID
SB20251001142
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Buffer overflow (CVE-ID: CVE-2023-53454)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to memory corruption within the mt_post_parse() and mt_input_configured() functions in drivers/hid/hid-multitouch.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/15ec7cb55e7d88755aa01d44a7a1015a42bfce86
- https://git.kernel.org/stable/c/1d7833db9fd118415dace2ca157bfa603dec9c8c
- https://git.kernel.org/stable/c/2763732ec1e68910719c75b6b896e11b6d3d622b
- https://git.kernel.org/stable/c/39c70c19456e50dcb3abfe53539220dff0490f1d
- https://git.kernel.org/stable/c/4794394635293a3e74591351fff469cea7ad15a2
- https://git.kernel.org/stable/c/ac0d389402a6ff9ad92cea02c2d8c711483b91ab
- https://git.kernel.org/stable/c/b70ac7849248ec8128fa12f86e3655ba38838f29
- https://git.kernel.org/stable/c/dde88ab4e45beb60b217026207aa9c14c88d71ab
- https://git.kernel.org/stable/c/df7ca43fe090e1a56c216c8ebc106ef5fd49afc6
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.257