HomeDefectsLIN1024-7701
Fixed

LIN1024-7701 : Security Advisory - linux - CVE-2025-21746

Created: Feb 27, 2025    Updated: Jun 25, 2025
Resolved Date: Apr 11, 2025
Found In Version: 10.24.33.1
Fix Version: 10.24.33.8
Severity: Standard
Applicable for: Wind River Linux LTS 24
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

Input: synaptics - fix crash when enabling pass-through port

When enabling a pass-through port an interrupt might come before psmouse
driver binds to the pass-through port. However synaptics sub-driver
tries to access psmouse instance presumably associated with the
pass-through port to figure out if only 1 byte of response or entire
protocol packet needs to be forwarded to the pass-through port and may
crash if psmouse instance has not been attached to the port yet.

Fix the crash by introducing open() and close() methods for the port and
check if the port is open before trying to access psmouse instance.
Because psmouse calls serio_open() only after attaching psmouse instance
to serio port instance this prevents the potential crash.

CREATE(Triage):(User=admin) CVE-2025-21746 (https://nvd.nist.gov/vuln/detail/CVE-2025-21746)

CVEs