CVE-2022-49984

HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report

published June 18, 2025

CVSS
—
EPSS
0%
Percentile
15.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report

It is possible for a malicious device to forgo submitting a Feature

Report. The HID Steam driver presently makes no prevision for this

and de-references the 'struct hid_report' pointer obtained from the

HID devices without first checking its validity. Let's change that.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00253 · 15.9th percentile
Published
2025-06-18T11:00Z
EPSS history
Timeline
  • 18 JUN 11:00Z
    HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
    cvelistv5