Riskcovery

CVE-2022-49984

HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report

State
Published
Severity
Not scored
Published
Jun 18, 2025
Updated
May 11, 2026
Reserved
Jun 18, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report

It is possible for a malicious device to forgo submitting a Feature Report. The HID Steam driver presently makes no prevision for this and de-references the 'struct hid_report' pointer obtained from the HID devices without first checking its validity. Let's change that.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c164d6abf3841ffacfdb757c10616f9cb1f67276 to before c20d03b82a2e3ddbb555dad4d4f3374a9763222cAffected
  • c164d6abf3841ffacfdb757c10616f9cb1f67276 to before fa2b822d86be5b5ad54fe4fa2daca464e71ff90aAffected
  • c164d6abf3841ffacfdb757c10616f9cb1f67276 to before dc815761948ab5b8c94db6cb53c95103588f16aeAffected
  • c164d6abf3841ffacfdb757c10616f9cb1f67276 to before 989560b6d9e00d99e07bc33067fa1c770994bf4dAffected
  • c164d6abf3841ffacfdb757c10616f9cb1f67276 to before dee1e51b54794e90763e70a3c78f27ba4fa930ecAffected
  • c164d6abf3841ffacfdb757c10616f9cb1f67276 to before cd11d1a6114bd4bc6450ae59f6e110ec47362126Affected
LinuxLinux
  • 4.18Affected
  • before 4.18Not affected
  • 4.19.257 through 4.19.*Not affected
  • 5.4.212 through 5.4.*Not affected
  • 5.10.141 through 5.10.*Not affected
  • 5.15.65 through 5.15.*Not affected
  • 5.19.7 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.