Fixed
Created: Dec 7, 2025
Updated: Jun 1, 2026
Resolved Date: May 25, 2026
Found In Version: 10.22.33.1
Fix Version: 10.22.33.24
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Kernel
In the Linux kernel, the following vulnerability has been resolved:[EOL][EOL]Input: cros_ec_keyb - fix an invalid memory access[EOL][EOL]If cros_ec_keyb_register_matrix() isn't called (due to[EOL]`buttons_switches_only`) in cros_ec_keyb_probe(), `ckdev->idev` remains[EOL]NULL. An invalid memory access is observed in cros_ec_keyb_process()[EOL]when receiving an EC_MKBP_EVENT_KEY_MATRIX event in cros_ec_keyb_work()[EOL]in such case.[EOL][EOL] Unable to handle kernel read from unreadable memory at virtual address 0000000000000028[EOL] ...[EOL] x3 : 0000000000000000 x2 : 0000000000000000[EOL] x1 : 0000000000000000 x0 : 0000000000000000[EOL] Call trace:[EOL] input_event[EOL] cros_ec_keyb_work[EOL] blocking_notifier_call_chain[EOL] ec_irq_thread[EOL][EOL]It's still unknown about why the kernel receives such malformed event,[EOL]in any cases, the kernel shouldn't access `ckdev->idev` and friends if[EOL]the driver doesn't intend to initialize them.
