]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
projects / thirdparty / kernel / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: cee8337) | patch
HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()
authorGünther Noack <gnoack@google.com>
Fri, 9 Jan 2026 12:25:58 +0000 (13:25 +0100)
committerJiri Kosina <jkosina@suse.com>
Sat, 10 Jan 2026 09:29:37 +0000 (10:29 +0100)
commit1547d41f9f19d691c2c9ce4c29f746297baef9e9
tree23174263973e528be933b556944db9a68b801b97tree
parentcee8337e1bad168136aecfe6416ecd7d3aa7529acommit | diff
HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()

Do not crash when a report has no fields.

Fake USB gadgets can send their own HID report descriptors and can define report
structures without valid fields.  This can be used to crash the kernel over USB.

Cc: stable@vger.kernel.org
Signed-off-by: Günther Noack <gnoack@google.com>
Signed-off-by: Jiri Kosina <jkosina@suse.com>
drivers/hid/hid-logitech-hidpp.c diff | blob | blame | history
A mirror of Linus' kernel repository