{"id":"CVE-2024-46745","revision":"56f1f3ed0cf849288274722275d4311a","records":[{"revision":"56f1f3ed0cf849288274722275d4311a","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-46745","aliases":[],"title":"Input: uinput - reject requests with unreasonable number of slots","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nInput: uinput - reject requests with unreasonable number of slots\n\n\nWhen exercising uinput interface syzkaller may try setting up device\nwith a really large number of slots, which causes memory allocation\nfailure in input_mt_init_slots(). While this allocation failure is\nhandled properly and request is rejected, it results in syzkaller\nreports. Additionally, such request may put undue burden on the\nsystem which will try to free a lot of memory for a bogus request.\n\nFix it by limiting allowed number of slots to 100. This can easily\nbe extended if we see devices that can track more than 100 contacts.","state":0,"publishedAt":"2024-09-18T07:12:05.798+00:00","modifiedAt":"2026-10-15T00:50:34.565+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/input/misc/uinput.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"38e7afe96c7c0ad900824911c61fdb04078033dc\",\n                            \"lessThan\": \"9c6d189f0c1c59ba9a32326ec82a0b367a3cd47b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"38e7afe96c7c0ad900824911c61fdb04078033dc\",\n                            \"lessThan\": \"597ff930296c4c8fc6b6a536884d4f1a7187ec70\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"38e7afe96c7c0ad900824911c61fdb04078033dc\",\n                            \"lessThan\": \"51fa08edd80003db700bdaa099385c5900d27f4b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"38e7afe96c7c0ad900824911c61fdb04078033dc\",\n                            \"lessThan\": \"9719687398dea8a6a12a10321a54dd75eec7ab2d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"38e7afe96c7c0ad900824911c61fdb04078033dc\",\n                            \"lessThan\": \"61df76619e270a46fd427fbdeb670ad491c42de2\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"38e7afe96c7c0ad900824911c61fdb04078033dc\",\n                            \"lessThan\": \"a4858b00a1ec57043697fb935565fe267f161833\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"38e7afe96c7c0ad900824911c61fdb04078033dc\",\n                            \"lessThan\": \"d76fc0f0b18d49b7e721c9e4975ef4bffde2f3e7\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"38e7afe96c7c0ad900824911c61fdb04078033dc\",\n                            \"lessThan\": \"206f533a0a7c683982af473079c4111f4a0f9f5e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/input/misc/uinput.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"2.6.36\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"2.6.36\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.19.322\",\n                            \"lessThanOrEqual\": \"4.19.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.284\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.226\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.167\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.110\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.51\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.10.10\",\n                            \"lessThanOrEqual\": \"6.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.11\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/9c6d189f0c1c59ba9a32326ec82a0b367a3cd47b","https://git.kernel.org/stable/c/597ff930296c4c8fc6b6a536884d4f1a7187ec70","https://git.kernel.org/stable/c/51fa08edd80003db700bdaa099385c5900d27f4b","https://git.kernel.org/stable/c/9719687398dea8a6a12a10321a54dd75eec7ab2d","https://git.kernel.org/stable/c/61df76619e270a46fd427fbdeb670ad491c42de2","https://git.kernel.org/stable/c/a4858b00a1ec57043697fb935565fe267f161833","https://git.kernel.org/stable/c/d76fc0f0b18d49b7e721c9e4975ef4bffde2f3e7","https://git.kernel.org/stable/c/206f533a0a7c683982af473079c4111f4a0f9f5e"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-46745","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-46745","identifiers":["CVE-2024-46745"]},"retained":false,"historicalAffected":[]}],"coverage":[]}