Linux input device driver Heap Buffer Overflow DoS

The vulnerability of the iforceinitdevice function in the drivers/input/joystick/iforce/iforce-main.c file of the Linux device driver module relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2022-49790: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: Input: iforce - invert valid length check when fetching device IDs syzbot is reporting uninitialized value at iforceinitdevice 1, for commit 6ac0aec6b0a6 "Input: iforce - allow callers supply data buffer when fetching device IDs"...