Beveiligingsadvies

CVE-2022-49984

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-06-18 11:00:46
Laatst bijgewerkt 2026-05-11 19:10:29
Toegewezen door Linux
CVSS-score geen score
Status PUBLISHED

Beschrijving

In the Linux kernel, the following vulnerability has been resolved: HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report It is possible for a malicious device to forgo submitting a Feature Report. The HID Steam driver presently makes no prevision for this and de-references the 'struct hid_report' pointer obtained from the HID devices without first checking its validity. Let's change that.