In the Linux kernel, the following vulnerability has been resolved:
HID: core: remove unnecessary WARN_ON() in implement()
Syzkaller hit a warning [1] in a call to implement() when trying to write a value into a field of smaller size in an output report.
Since implement() already has a warn message printed out with the help of hidwarn() and value in question gets trimmed with: ... value &= m; ... WARNON may be considered superfluous. Remove it to suppress future syzkaller triggers.
[1] WARNING: CPU: 0 PID: 5084 at drivers/hid/hid-core.c:1451 implement drivers/hid/hid-core.c:1451 [inline] WARNING: CPU: 0 PID: 5084 at drivers/hid/hid-core.c:1451 hidoutputreport+0x548/0x760 drivers/hid/hid-core.c:1863 Modules linked in: CPU: 0 PID: 5084 Comm: syz-executor424 Not tainted 6.9.0-rc7-syzkaller-00183-gcf87f46fd34d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 RIP: 0010:implement drivers/hid/hid-core.c:1451 [inline] RIP: 0010:hidoutputreport+0x548/0x760 drivers/hid/hid-core.c:1863 ... Call Trace: <TASK> _usbhidsubmitreport drivers/hid/usbhid/hid-core.c:591 [inline] usbhidsubmitreport+0x43d/0x9e0 drivers/hid/usbhid/hid-core.c:636 hiddevioctl+0x138b/0x1f00 drivers/hid/usbhid/hiddev.c:726 vfsioctl fs/ioctl.c:51 [inline] _dosysioctl fs/ioctl.c:904 [inline] _sesysioctl+0xfc/0x170 fs/ioctl.c:890 dosyscallx64 arch/x86/entry/common.c:52 [inline] dosyscall64+0xf5/0x240 arch/x86/entry/common.c:83 entrySYSCALL64after_hwframe+0x77/0x7f ...
[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"272032959053968511901365222885050938423",
"116706462200701963281591170123913702413",
"125533375592136684314360135059128999251",
"151866223686431593543864708076968257000"
]
},
"signature_type": "Line",
"target": {
"file": "drivers/hid/hid-core.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bfd546fc7fd76076f81bf41b85b51ceda30949fd",
"id": "CVE-2024-39509-0208048b"
},
{
"digest": {
"function_hash": "103522606628119487475965804740083807761",
"length": 568.0
},
"signature_type": "Function",
"target": {
"function": "implement",
"file": "drivers/hid/hid-core.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@30f76bc468b9b2cbbd5d3eb482661e3e4798893f",
"id": "CVE-2024-39509-067ff71d"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"272032959053968511901365222885050938423",
"116706462200701963281591170123913702413",
"125533375592136684314360135059128999251",
"151866223686431593543864708076968257000"
]
},
"signature_type": "Line",
"target": {
"file": "drivers/hid/hid-core.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@33f6832798dd3297317901cc1db556ac3ae80c24",
"id": "CVE-2024-39509-164a6b73"
},
{
"digest": {
"function_hash": "103522606628119487475965804740083807761",
"length": 568.0
},
"signature_type": "Function",
"target": {
"function": "implement",
"file": "drivers/hid/hid-core.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@33f6832798dd3297317901cc1db556ac3ae80c24",
"id": "CVE-2024-39509-168a211d"
},
{
"digest": {
"function_hash": "103522606628119487475965804740083807761",
"length": 568.0
},
"signature_type": "Function",
"target": {
"function": "implement",
"file": "drivers/hid/hid-core.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8bac61934cd563b073cd30b8cf6d5c758ab5ab26",
"id": "CVE-2024-39509-2607678b"
},
{
"digest": {
"function_hash": "103522606628119487475965804740083807761",
"length": 568.0
},
"signature_type": "Function",
"target": {
"function": "implement",
"file": "drivers/hid/hid-core.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@655c6de2f215b61d0708db6b06305eee9bbfeba2",
"id": "CVE-2024-39509-51cf2bda"
},
{
"digest": {
"function_hash": "103522606628119487475965804740083807761",
"length": 568.0
},
"signature_type": "Function",
"target": {
"function": "implement",
"file": "drivers/hid/hid-core.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bfd546fc7fd76076f81bf41b85b51ceda30949fd",
"id": "CVE-2024-39509-7c0b0115"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"272032959053968511901365222885050938423",
"116706462200701963281591170123913702413",
"125533375592136684314360135059128999251",
"151866223686431593543864708076968257000"
]
},
"signature_type": "Line",
"target": {
"file": "drivers/hid/hid-core.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4aa2dcfbad538adf7becd0034a3754e1bd01b2b5",
"id": "CVE-2024-39509-8567710d"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"272032959053968511901365222885050938423",
"116706462200701963281591170123913702413",
"125533375592136684314360135059128999251",
"151866223686431593543864708076968257000"
]
},
"signature_type": "Line",
"target": {
"file": "drivers/hid/hid-core.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f9db5fbeffb951cac3f0fb1c2eeffb79785399ca",
"id": "CVE-2024-39509-a6d51ee8"
},
{
"digest": {
"function_hash": "103522606628119487475965804740083807761",
"length": 568.0
},
"signature_type": "Function",
"target": {
"function": "implement",
"file": "drivers/hid/hid-core.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4aa2dcfbad538adf7becd0034a3754e1bd01b2b5",
"id": "CVE-2024-39509-ab7b6e38"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"272032959053968511901365222885050938423",
"116706462200701963281591170123913702413",
"125533375592136684314360135059128999251",
"151866223686431593543864708076968257000"
]
},
"signature_type": "Line",
"target": {
"file": "drivers/hid/hid-core.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@955b3764671f3f157215194972d9c01a3a4bd316",
"id": "CVE-2024-39509-be96445b"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"272032959053968511901365222885050938423",
"116706462200701963281591170123913702413",
"125533375592136684314360135059128999251",
"151866223686431593543864708076968257000"
]
},
"signature_type": "Line",
"target": {
"file": "drivers/hid/hid-core.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@30f76bc468b9b2cbbd5d3eb482661e3e4798893f",
"id": "CVE-2024-39509-daf2bfd3"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"272032959053968511901365222885050938423",
"116706462200701963281591170123913702413",
"125533375592136684314360135059128999251",
"151866223686431593543864708076968257000"
]
},
"signature_type": "Line",
"target": {
"file": "drivers/hid/hid-core.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8bac61934cd563b073cd30b8cf6d5c758ab5ab26",
"id": "CVE-2024-39509-dc468927"
},
{
"digest": {
"function_hash": "103522606628119487475965804740083807761",
"length": 568.0
},
"signature_type": "Function",
"target": {
"function": "implement",
"file": "drivers/hid/hid-core.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@955b3764671f3f157215194972d9c01a3a4bd316",
"id": "CVE-2024-39509-df765098"
},
{
"digest": {
"function_hash": "103522606628119487475965804740083807761",
"length": 568.0
},
"signature_type": "Function",
"target": {
"function": "implement",
"file": "drivers/hid/hid-core.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f9db5fbeffb951cac3f0fb1c2eeffb79785399ca",
"id": "CVE-2024-39509-e953bd63"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"272032959053968511901365222885050938423",
"116706462200701963281591170123913702413",
"125533375592136684314360135059128999251",
"151866223686431593543864708076968257000"
]
},
"signature_type": "Line",
"target": {
"file": "drivers/hid/hid-core.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@655c6de2f215b61d0708db6b06305eee9bbfeba2",
"id": "CVE-2024-39509-f69fb520"
}
]