{"id":"CVE-2025-37862","title":"HID: pidff: Fix null pointer dereference in pidff_find_fields","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nHID: pidff: Fix null pointer dereference in pidff_find_fields\n\nThis function triggered a null pointer dereference if used to search for\na report that isn't implemented …","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 224ee88fe39564358ec99b46bf3ee6e6999ae17d < 44a1b8b2027afbb37e418993fb23561bdb9efb38","Linux >= 224ee88fe39564358ec99b46bf3ee6e6999ae17d < d230becb9d38b7325c5c38d051693e4c26b1829b","Linux >= 224ee88fe39564358ec99b46bf3ee6e6999ae17d < 6b4449e4f03326fbd2136e67bfcc1e6ffe61541d","Linux >= 224ee88fe39564358ec99b46bf3ee6e6999ae17d < ddb147885225d768025f6818df533d30edf3e102","Linux >= 224ee88fe39564358ec99b46bf3ee6e6999ae17d < be706a48bb7896d4130edc82811233d1d62158e7","Linux >= 224ee88fe39564358ec99b46bf3ee6e6999ae17d < f8f4d77710e1c38f4a2bd26c88c4878b5b5e817a","Linux >= 224ee88fe39564358ec99b46bf3ee6e6999ae17d < 3a507184f9307e19cb441b897c49e7843c94e56b","Linux >= 224ee88fe39564358ec99b46bf3ee6e6999ae17d < e368698da79af821f18c099520deab1219c2044b","Linux >= 224ee88fe39564358ec99b46bf3ee6e6999ae17d < 22a05462c3d0eee15154faf8d13c49e6295270a5","Linux 2.6.19"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:42:38.435073Z"},"published":"2025-05-09","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:52:05.963Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-37862","references":[{"url":"https://git.kernel.org/stable/c/44a1b8b2027afbb37e418993fb23561bdb9efb38"},{"url":"https://git.kernel.org/stable/c/d230becb9d38b7325c5c38d051693e4c26b1829b"},{"url":"https://git.kernel.org/stable/c/6b4449e4f03326fbd2136e67bfcc1e6ffe61541d"},{"url":"https://git.kernel.org/stable/c/ddb147885225d768025f6818df533d30edf3e102"},{"url":"https://git.kernel.org/stable/c/be706a48bb7896d4130edc82811233d1d62158e7"},{"url":"https://git.kernel.org/stable/c/f8f4d77710e1c38f4a2bd26c88c4878b5b5e817a"},{"url":"https://git.kernel.org/stable/c/3a507184f9307e19cb441b897c49e7843c94e56b"},{"url":"https://git.kernel.org/stable/c/e368698da79af821f18c099520deab1219c2044b"},{"url":"https://git.kernel.org/stable/c/22a05462c3d0eee15154faf8d13c49e6295270a5"}],"tags":["cve.org"],"epss":0.00311,"epssPercentile":0.24169,"ingestedAt":"2026-11-05T22:38:31.887Z","slug":"CVE-2025-37862","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nHID: pidff: Fix null pointer dereference in pidff_find_fields\n\nThis function triggered a null pointer dereference if used to search for\na report that isn't implemented on the device. This happened both for\noptional and required reports alike.\n\nThe same logic was applied to pidff_find_special_field and although\npidff_init_fields should return an error earlier if one of the required\nreports is missing, future modifications could change this logic and\nresurface this possible null pointer dereference again.\n\nLKML bug report:\nhttps://lore.kernel.org/all/CAL-gK7f5=R0nrrQdPtaZZr1fd-cdAMbDMuZ_NLA8vM0SX+nGSw@mail.gmail.com\n\n## Affected\n\n- `Linux >= 224ee88fe39564358ec99b46bf3ee6e6999ae17d < 44a1b8b2027afbb37e418993fb23561bdb9efb38`\n- `Linux >= 224ee88fe39564358ec99b46bf3ee6e6999ae17d < d230becb9d38b7325c5c38d051693e4c26b1829b`\n- `Linux >= 224ee88fe39564358ec99b46bf3ee6e6999ae17d < 6b4449e4f03326fbd2136e67bfcc1e6ffe61541d`\n- `Linux >= 224ee88fe39564358ec99b46bf3ee6e6999ae17d < ddb147885225d768025f6818df533d30edf3e102`\n- `Linux >= 224ee88fe39564358ec99b46bf3ee6e6999ae17d < be706a48bb7896d4130edc82811233d1d62158e7`\n- `Linux >= 224ee88fe39564358ec99b46bf3ee6e6999ae17d < f8f4d77710e1c38f4a2bd26c88c4878b5b5e817a`\n- `Linux >= 224ee88fe39564358ec99b46bf3ee6e6999ae17d < 3a507184f9307e19cb441b897c49e7843c94e56b`\n- `Linux >= 224ee88fe39564358ec99b46bf3ee6e6999ae17d < e368698da79af821f18c099520deab1219c2044b`\n- `Linux >= 224ee88fe39564358ec99b46bf3ee6e6999ae17d < 22a05462c3d0eee15154faf8d13c49e6295270a5`\n- `Linux 2.6.19`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}