CVE-2025-38378

In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix slab use-after-free bug in appletbkbdprobe In probe appletbkbdprobe a "struct appletbkbd kbd" is allocated via devmkzalloc to store touch bar keyboard related data. Later on if backlightdevicegetbyname finds...

CVE-2025-38378

CVE-2025-38378 affects the Linux kernel HID path for appletb-kbd. The defect is a slab use-after-free caused when a timer (kbd->inactivity_timer) is armed after probe failure and later expires, accessing memory (kbd) that has been freed. Root cause: failure paths do not disarm the timer. Fixes...

CVE-2025-38378 HID: appletb-kbd: fix slab use-after-free bug in appletb_kbd_probe

In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix slab use-after-free bug in appletbkbdprobe In probe appletbkbdprobe a "struct appletbkbd kbd" is allocated via devmkzalloc to store touch bar keyboard related data. Later on if backlightdevicegetbyname finds...