Libinput: libinput: information disclosure via dangling pointer in lua plugin handling

A flaw was found in libinput. An attacker capable of deploying a Lua plugin file in specific system directories can exploit a dangling pointer vulnerability. This occurs when a garbage collection cleanup function is called, leaving a pointer that can then be printed to system logs. This could potentially expose sensitive data if the memory location is re-used, leading to information disclosure. For this exploit to work, Lua plugins must be enabled in libinput and loaded by the compositor.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

无效指针解引用

libinput 安全漏洞

libinput是freedesktop开源的一个库，它为显示服务器和其他需要处理内核提供的输入设备的应用程序提供完整的输入堆栈。 libinput存在安全漏洞，该漏洞源于攻击者可在特定系统目录部署Lua插件文件以利用悬空指针，可能导致敏感数据泄露。

N/A

N/A