In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix maxfield check in DJ short report validation Commit b6a57912854e ("HID: logitech-dj: Prevent REPORT_ID_DJ_S…
Info
Summary
In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix maxfield check in DJ short report validation Commit b6a57912854e ("HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write") added validation for the DJ short output report, but the error path dereferences rep->field[0] even when rep->maxfield is zero. Commit 8b9a097eb2fc ("HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report") made the check conditional on rep being…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/2b70bebc709489d29a31ac2935aeffb8d5228395
- https://git.kernel.org/stable/c/590cc4d782487632a52f37c2171bee1eeea29627
- https://git.kernel.org/stable/c/7a89ad762fad53d56b7002d7ffc923a4b7f4006f
- https://git.kernel.org/stable/c/80c1e18473f63fd7c6a2bc9ad6f3d0a6cc4fb500
- https://git.kernel.org/stable/c/95b3f23d632490b5eb285b9fcf7284f2ac8f9872
Timeline
- nvd_ingest NVD