Security Advisory

CVE-2022-49984

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-06-18 11:00:46

Last updated 2026-05-11 19:10:29

Assigner Linux

State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report It is possible for a malicious device to forgo submitting a Feature Report. The HID Steam driver presently makes no prevision for this and de-references the struct hid_report pointer obtained from the HID devices without first checking its validity. Lets change that.

← Browse all CVEs View on cve.org ↗