Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-43136

HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() Do not crash when a report has no fields. Fake USB gadgets can send their own HID report descriptors and can define report structures without valid fields. This can be used to crash the kernel over USB.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 to < ae81fac9ce81917817d787e6b74e68482d99bdf2affected
  • fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 to < 2dc023dbc11b8dfa8afa63242762acd8cddcad03affected
  • fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 to < 7f59999fcd699af06ad2aef446a635ea6aa87db3affected
  • fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 to < b74bf7d0d01fa9b53653f58c29aa00772121f6e9affected
  • fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 to < f1ceaaf93ea32d0f2b95c95f784ee155962c52adaffected
  • fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 to < 1acb28123e57b50d737377f400f57eec889fe5e4affected
  • fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 to < fb1725c0804dbec9dd01c4cb5c9f1f77a69e36dcaffected
  • fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 to < 1547d41f9f19d691c2c9ce4c29f746297baef9e9affected

Linux Linux

Default version status: affected

  • 5.2affected
  • 0 to < 5.2unaffected
  • 5.10.252 to ≤ 5.10.*unaffected
  • 5.15.202 to ≤ 5.15.*unaffected
  • 6.1.165 to ≤ 6.1.*unaffected
  • 6.6.128 to ≤ 6.6.*unaffected
  • 6.12.75 to ≤ 6.12.*unaffected
  • 6.18.16 to ≤ 6.18.*unaffected
  • 6.19.6 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References