CVE-2021-46932— Input: appletouch - initialize work before device registration
Possible ATT&CK Techniques 1AI
T1059 · Command and Scripting InterpreterAffected Version Matrix 18
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 5a6eb676d3bc4d7a6feab200a92437b62ad298da< d2cb2bf39a6d17ef4bdc0e59c1a35cf5751ad8f4 | affected |
5a6eb676d3bc4d7a6feab200a92437b62ad298da< d1962f263a176f493400b8f91bfbf2bfedce951e | affected | ||
5a6eb676d3bc4d7a6feab200a92437b62ad298da< 292d2ac61fb0d9276a0f7b7ce4f50426f2a1c99f | affected | ||
5a6eb676d3bc4d7a6feab200a92437b62ad298da< a02e1404e27855089d2b0a0acc4652c2ce65fe46 | affected | ||
5a6eb676d3bc4d7a6feab200a92437b62ad298da< 975774ea7528b489930b76a77ffc4d5379b95ff2 | affected | ||
5a6eb676d3bc4d7a6feab200a92437b62ad298da< 9f329d0d6c91142cf0ad08d23c72dd195db2633c | affected | ||
5a6eb676d3bc4d7a6feab200a92437b62ad298da< e79ff8c68acb1eddf709d3ac84716868f2a91012 | affected | ||
5a6eb676d3bc4d7a6feab200a92437b62ad298da< 9f3ccdc3f6ef10084ceb3a47df0961bec6196fd0 | affected | ||
| … +10 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-46932
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Input: appletouch - initialize work before device registration
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: Input: appletouch - initialize work before device registration Syzbot has reported warning in __flush_work(). This warning is caused by work->func == NULL, which means missing work initialization. This may happen, since input_dev->close() calls cancel_work_sync(&dev->work), but dev->work initalization happens _after_ input_register_device() call. So this patch moves dev->work initialization before registering input device
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于 appletouch 设备注册前没有进行初始化。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2021-46932
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-46932
请登录查看更多情报信息。
Other References for CVE-2021-46932 (8)
Same Patch Batch · Linux · 2024-02-27 · 67 CVEs total
| CVE-2021-46951 | tpm: efi: Use local variable for calculating final log size | |
| CVE-2021-46971 | perf/core: Fix unconditional security_locked_down() call | |
| CVE-2021-46970 | bus: mhi: pci_generic: Remove WQ_MEM_RECLAIM flag from state workqueue | |
| CVE-2021-46969 | bus: mhi: core: Fix invalid error returning in mhi_queue | |
| CVE-2021-46957 | riscv/kprobe: fix kernel panic when invoking sys_read traced by kprobe | |
| CVE-2021-46956 | virtiofs: fix memory leak in virtio_fs_probe() | |
| CVE-2021-46955 | openvswitch: fix stack OOB read while fragmenting IPv4 packets | |
| CVE-2021-46954 | net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets | |
| CVE-2021-46953 | ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure | |
| CVE-2021-46952 | NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds | |
| CVE-2021-46958 | btrfs: fix race between transaction aborts and fsyncs leading to use-after-free | |
| CVE-2021-46950 | md/raid1: properly indicate failure when ending a failed write request | |
| CVE-2021-46949 | sfc: farch: fix TX queue lookup in TX flush done handling | |
| CVE-2021-46948 | sfc: farch: fix TX queue lookup in TX event handling | |
| CVE-2021-46947 | sfc: adjust efx->xdp_tx_queue_count with the real number of initialized queues | |
| CVE-2021-46945 | ext4: always panic when errors=panic is specified | |
| CVE-2021-46944 | media: staging/intel-ipu3: Fix memory leak in imu_fmt | |
| CVE-2021-46943 | media: staging/intel-ipu3: Fix set_fmt error handling | |
| CVE-2021-46942 | io_uring: fix shared sqpoll cancellation hangs | |
| CVE-2021-46941 | usb: dwc3: core: Do core softreset when switch mode |
Showing top 20 of 67 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-64560
posix-cpu-timers: Prevent UAF caused by non-leader exec() ra - CVE-2026-64559
s390/pkey: Check length in PKEY_VERIFYPROTK ioctl - CVE-2026-64558
s390/pkey: Check length in pkey_pckmo handler implementation - CVE-2026-64556
perf/core: Detach event groups during remove_on_exec - CVE-2026-64557
Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_conne
Same vendor: Linux
- CVE-2026-64560
posix-cpu-timers: Prevent UAF caused by non-leader exec() ra - CVE-2026-64559
s390/pkey: Check length in PKEY_VERIFYPROTK ioctl - CVE-2026-64558
s390/pkey: Check length in pkey_pckmo handler implementation - CVE-2026-64556
perf/core: Detach event groups during remove_on_exec - CVE-2026-64557
Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_conne
V. Comments for CVE-2021-46932
No comments yet