CVE-2025-37862

HID: pidff: Fix null pointer dereference in pidff_find_fields

published May 9, 2025

CVSS
—
EPSS
0%
Percentile
23.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

HID: pidff: Fix null pointer dereference in pidff_find_fields

This function triggered a null pointer dereference if used to search for

a report that isn't implemented on the device. This happened both for

optional and required reports alike.

The same logic was applied to pidff_find_special_field and although

pidff_init_fields should return an error earlier if one of the required

reports is missing, future modifications could change this logic and

resurface this possible null pointer dereference again.

LKML bug report:

https://lore.kernel.org/all/CAL-gK7f5=R0nrrQdPtaZZr1fd-cdAMbDMuZ_NLA8vM0SX+nGSw@mail.gmail.com

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00314 · 23.1th percentile
Published
2025-05-09T06:42Z
EPSS history
Timeline
  • 09 MAY 06:42Z
    HID: pidff: Fix null pointer dereference in pidff_find_fields
    cvelistv5