CVE-2022-49984

Publication date

2025-06-18 11:00:46

Family

Linux

State

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report It is possible for a malicious device to forgo submitting a Feature Report. The HID Steam driver presently makes no prevision for this and de-references the struct hid_report pointer obtained from the HID devices without first checking its validity. Lets change that.