Description
In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Fix null pointer dereference in pidff_find_fields This function triggered a null pointer dereference if used to search for a report that isn't implemented on the device. This happened both for optional and required reports alike. The same logic was applied to pidff_find_special_field and although pidff_init_fields should return an error earlier if one of the required reports is missing, future modifications could change this logic and resurface this possible null pointer dereference again. LKML bug report: https://lore.kernel.org/all/CAL-gK7f5=R0nrrQdPtaZZr1fd-cdAMbDMuZ_NLA8vM0SX+nGSw@mail.gmail.com
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
224ee88fe39564358ec99b46bf3ee6e6999ae17d to < 44a1b8b2027afbb37e418993fb23561bdb9efb38affected224ee88fe39564358ec99b46bf3ee6e6999ae17d to < d230becb9d38b7325c5c38d051693e4c26b1829baffected224ee88fe39564358ec99b46bf3ee6e6999ae17d to < 6b4449e4f03326fbd2136e67bfcc1e6ffe61541daffected224ee88fe39564358ec99b46bf3ee6e6999ae17d to < ddb147885225d768025f6818df533d30edf3e102affected224ee88fe39564358ec99b46bf3ee6e6999ae17d to < be706a48bb7896d4130edc82811233d1d62158e7affected224ee88fe39564358ec99b46bf3ee6e6999ae17d to < f8f4d77710e1c38f4a2bd26c88c4878b5b5e817aaffected224ee88fe39564358ec99b46bf3ee6e6999ae17d to < 3a507184f9307e19cb441b897c49e7843c94e56baffected224ee88fe39564358ec99b46bf3ee6e6999ae17d to < e368698da79af821f18c099520deab1219c2044baffected224ee88fe39564358ec99b46bf3ee6e6999ae17d to < 22a05462c3d0eee15154faf8d13c49e6295270a5affected
Linux Linux
Default version status: affected
2.6.19affected0 to < 2.6.19unaffected5.4.293 to ≤ 5.4.*unaffected5.10.237 to ≤ 5.10.*unaffected5.15.181 to ≤ 5.15.*unaffected6.1.135 to ≤ 6.1.*unaffected6.6.88 to ≤ 6.6.*unaffected6.12.24 to ≤ 6.12.*unaffected6.13.12 to ≤ 6.13.*unaffected6.14.3 to ≤ 6.14.*unaffected6.15 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/44a1b8b2027afbb37e418993fb23561bdb9efb38 ↗
- https://git.kernel.org/stable/c/d230becb9d38b7325c5c38d051693e4c26b1829b ↗
- https://git.kernel.org/stable/c/6b4449e4f03326fbd2136e67bfcc1e6ffe61541d ↗
- https://git.kernel.org/stable/c/ddb147885225d768025f6818df533d30edf3e102 ↗
- https://git.kernel.org/stable/c/be706a48bb7896d4130edc82811233d1d62158e7 ↗
- https://git.kernel.org/stable/c/f8f4d77710e1c38f4a2bd26c88c4878b5b5e817a ↗
- https://git.kernel.org/stable/c/3a507184f9307e19cb441b897c49e7843c94e56b ↗
- https://git.kernel.org/stable/c/e368698da79af821f18c099520deab1219c2044b ↗
- https://git.kernel.org/stable/c/22a05462c3d0eee15154faf8d13c49e6295270a5 ↗
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html ↗
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html ↗