Medium 5.5Published Feb 26, 2025

CVE-2024-58020HID: multitouch: Add NULL check in mt_input_configured

Updated under an hour ago (Oct 27, 2026, 7:23 PM ET)

Does this affect you?

It affects Linux and 5 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Add NULL check in mt_input_configured devm_kasprintf() can return a NULL pointer on failure,but this returned value in mt_input_configured() is not checked. Add NULL check in mt_input_configured(), to handle kernel NULL pointer dereference error.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from df7ca43fe090e1a56c216c8ebc106ef5fd49afc6 before a04d96ef67a42165f93194eef22a270acba4b74c; from 15ec7cb55e7d88755aa01d44a7a1015a42bfce86 before a6bfd3856e9f3da083f177753c623d58ba935e0a; from dde88ab4e45beb60b217026207aa9c14c88d71ab before 2052b44cd0a62b6fdbe3371e5ba6029c56c400ca; 2763732ec1e68910719c75b6b896e11b6d3d622b builds before 4e7113f591163d99adc7cbcd7295030c8c5d3fc7; 4794394635293a3e74591351fff469cea7ad15a2 builds before 62f8bf06262b6fc55c58f4c5256140f1382f3b01; from 4794394635293a3e74591351fff469cea7ad15a2 before aa879ef6d3acf96fa2c7122d0632061d4ea58d48; 4794394635293a3e74591351fff469cea7ad15a2 builds before 97c09cc2e72769edb6994b531edcfa313b96bade; 4794394635293a3e74591351fff469cea7ad15a2 builds before 9b8e2220d3a052a690b1d1b23019673e612494c5; and 12 more ranges	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	all versions	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
linux linux_kernel linux:linux_kernel	from 4.14.326 before 4.15; from 4.19.295 before 4.20; from 5.4.257 before 5.5; from 5.10.195 before 5.11; from 5.15.132 before 5.16; from 6.1.53 before 6.1.129; from 6.4.16 before 6.5; from 6.5.3 before 6.6.79; and 4 more ranges	NVD

References

References

https://git.kernel.org/stable/c/a04d96ef67a42165f93194eef22a270acba4b74c
https://git.kernel.org/stable/c/a6bfd3856e9f3da083f177753c623d58ba935e0a
https://git.kernel.org/stable/c/2052b44cd0a62b6fdbe3371e5ba6029c56c400ca
https://git.kernel.org/stable/c/4e7113f591163d99adc7cbcd7295030c8c5d3fc7	patch
https://git.kernel.org/stable/c/62f8bf06262b6fc55c58f4c5256140f1382f3b01	patch
https://git.kernel.org/stable/c/aa879ef6d3acf96fa2c7122d0632061d4ea58d48	patch
https://git.kernel.org/stable/c/97c09cc2e72769edb6994b531edcfa313b96bade	patch
https://git.kernel.org/stable/c/9b8e2220d3a052a690b1d1b23019673e612494c5	patch
https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
1–10 of 14

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.