---
id: CVE-2026-43136
title: 'HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()

  Do not crash when a report has no fields.

  Fake USB gadgets can send their own HID report descriptors …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 <
    ae81fac9ce81917817d787e6b74e68482d99bdf2
  - >-
    Linux >= fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 <
    2dc023dbc11b8dfa8afa63242762acd8cddcad03
  - >-
    Linux >= fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 <
    7f59999fcd699af06ad2aef446a635ea6aa87db3
  - >-
    Linux >= fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 <
    b74bf7d0d01fa9b53653f58c29aa00772121f6e9
  - >-
    Linux >= fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 <
    f1ceaaf93ea32d0f2b95c95f784ee155962c52ad
  - >-
    Linux >= fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 <
    1acb28123e57b50d737377f400f57eec889fe5e4
  - >-
    Linux >= fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 <
    fb1725c0804dbec9dd01c4cb5c9f1f77a69e36dc
  - >-
    Linux >= fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 <
    1547d41f9f19d691c2c9ce4c29f746297baef9e9
  - Linux 5.2
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T15:29:20.507703Z'
published: '2026-05-06'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T15:32:33.022Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-43136'
references:
  - url: 'https://git.kernel.org/stable/c/ae81fac9ce81917817d787e6b74e68482d99bdf2'
  - url: 'https://git.kernel.org/stable/c/2dc023dbc11b8dfa8afa63242762acd8cddcad03'
  - url: 'https://git.kernel.org/stable/c/7f59999fcd699af06ad2aef446a635ea6aa87db3'
  - url: 'https://git.kernel.org/stable/c/b74bf7d0d01fa9b53653f58c29aa00772121f6e9'
  - url: 'https://git.kernel.org/stable/c/f1ceaaf93ea32d0f2b95c95f784ee155962c52ad'
  - url: 'https://git.kernel.org/stable/c/1acb28123e57b50d737377f400f57eec889fe5e4'
  - url: 'https://git.kernel.org/stable/c/fb1725c0804dbec9dd01c4cb5c9f1f77a69e36dc'
  - url: 'https://git.kernel.org/stable/c/1547d41f9f19d691c2c9ce4c29f746297baef9e9'
tags:
  - cve.org
epss: 0.00128
epssPercentile: 0.02473
ingestedAt: '2026-11-06T15:54:04.016Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()

Do not crash when a report has no fields.

Fake USB gadgets can send their own HID report descriptors and can define report
structures without valid fields.  This can be used to crash the kernel over USB.

## Affected

- `Linux >= fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 < ae81fac9ce81917817d787e6b74e68482d99bdf2`
- `Linux >= fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 < 2dc023dbc11b8dfa8afa63242762acd8cddcad03`
- `Linux >= fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 < 7f59999fcd699af06ad2aef446a635ea6aa87db3`
- `Linux >= fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 < b74bf7d0d01fa9b53653f58c29aa00772121f6e9`
- `Linux >= fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 < f1ceaaf93ea32d0f2b95c95f784ee155962c52ad`
- `Linux >= fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 < 1acb28123e57b50d737377f400f57eec889fe5e4`
- `Linux >= fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 < fb1725c0804dbec9dd01c4cb5c9f1f77a69e36dc`
- `Linux >= fe3ee1ec007bf7b10d7c02814d4b8fbe7d9bb435 < 1547d41f9f19d691c2c9ce4c29f746297baef9e9`
- `Linux 5.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.