Linux Kernel HID uclogic NULL Pointer Dereference Vulnerability

A NULL pointer dereference vulnerability has been identified in the Linux kernel's HID uclogic component. The issue arises in the function uclogic_input_configured(), which fails to validate the output of devm_kasprintf() before using it. This oversight allows for a NULL pointer dereference when memory allocation by devm_kasprintf() fails. The vulnerability has been addressed by adding a NULL check after the memory allocation to prevent such dereference.

Impact

Exploitation of this vulnerability leads to a NULL pointer dereference, causing a crash or undefined behavior in the kernel.