CVE-2022-49984

Katalog CVE

CVSS 5.5 · Medium EPSS 0,25%

Kerentanan NULL Pointer Dereference pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report It is possible for a malicious device to forgo submitting a Feature Report. The HID Steam driver presently makes no prevision for this and de-references the 'struct hid_report' pointer obtained from the HID devices without first checking its validity. Let's change that.

Rincian

Terbit di NVD

18 Juni 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,25% peluang dieksploitasi; lebih tinggi dari 14,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/989560b6d9e00d99e07bc33067fa1c770994bf4d patch
• https://git.kernel.org/stable/c/c20d03b82a2e3ddbb555dad4d4f3374a9763222c patch
• https://git.kernel.org/stable/c/cd11d1a6114bd4bc6450ae59f6e110ec47362126 patch
• https://git.kernel.org/stable/c/dc815761948ab5b8c94db6cb53c95103588f16ae patch
• https://git.kernel.org/stable/c/dee1e51b54794e90763e70a3c78f27ba4fa930ec patch
• https://git.kernel.org/stable/c/fa2b822d86be5b5ad54fe4fa2daca464e71ff90a patch