Description
In the Linux kernel, the following vulnerability has been resolved: HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report It is possible for a malicious device to forgo submitting a Feature Report. The HID Steam driver presently makes no prevision for this and de-references the 'struct hid_report' pointer obtained from the HID devices without first checking its validity. Let's change that.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
c164d6abf3841ffacfdb757c10616f9cb1f67276 to < c20d03b82a2e3ddbb555dad4d4f3374a9763222caffectedc164d6abf3841ffacfdb757c10616f9cb1f67276 to < fa2b822d86be5b5ad54fe4fa2daca464e71ff90aaffectedc164d6abf3841ffacfdb757c10616f9cb1f67276 to < dc815761948ab5b8c94db6cb53c95103588f16aeaffectedc164d6abf3841ffacfdb757c10616f9cb1f67276 to < 989560b6d9e00d99e07bc33067fa1c770994bf4daffectedc164d6abf3841ffacfdb757c10616f9cb1f67276 to < dee1e51b54794e90763e70a3c78f27ba4fa930ecaffectedc164d6abf3841ffacfdb757c10616f9cb1f67276 to < cd11d1a6114bd4bc6450ae59f6e110ec47362126affected
Linux Linux
Default version status: affected
4.18affected0 to < 4.18unaffected4.19.257 to ≤ 4.19.*unaffected5.4.212 to ≤ 5.4.*unaffected5.10.141 to ≤ 5.10.*unaffected5.15.65 to ≤ 5.15.*unaffected5.19.7 to ≤ 5.19.*unaffected6.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/c20d03b82a2e3ddbb555dad4d4f3374a9763222c ↗
- https://git.kernel.org/stable/c/fa2b822d86be5b5ad54fe4fa2daca464e71ff90a ↗
- https://git.kernel.org/stable/c/dc815761948ab5b8c94db6cb53c95103588f16ae ↗
- https://git.kernel.org/stable/c/989560b6d9e00d99e07bc33067fa1c770994bf4d ↗
- https://git.kernel.org/stable/c/dee1e51b54794e90763e70a3c78f27ba4fa930ec ↗
- https://git.kernel.org/stable/c/cd11d1a6114bd4bc6450ae59f6e110ec47362126 ↗