linux-cve-announce - CVE-2022-49984: HID: steam: Prevent NULL pointer dereference in steam_{recv,send}

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <2025061822-CVE-2022-49984-fa6b@gregkh>
Date: Wed, 18 Jun 2025 13:00:49 +0200
From: Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To: linux-cve-announce@...r.kernel.org
Cc: Greg Kroah-Hartman <gregkh@...nel.org>
Subject: CVE-2022-49984: HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report

From: Greg Kroah-Hartman <gregkh@...nel.org>

Description
===========

In the Linux kernel, the following vulnerability has been resolved:

HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report

It is possible for a malicious device to forgo submitting a Feature
Report.  The HID Steam driver presently makes no prevision for this
and de-references the 'struct hid_report' pointer obtained from the
HID devices without first checking its validity.  Let's change that.

The Linux kernel CVE team has assigned CVE-2022-49984 to this issue.


Affected and fixed versions
===========================

	Issue introduced in 4.18 with commit c164d6abf3841ffacfdb757c10616f9cb1f67276 and fixed in 4.19.257 with commit c20d03b82a2e3ddbb555dad4d4f3374a9763222c
	Issue introduced in 4.18 with commit c164d6abf3841ffacfdb757c10616f9cb1f67276 and fixed in 5.4.212 with commit fa2b822d86be5b5ad54fe4fa2daca464e71ff90a
	Issue introduced in 4.18 with commit c164d6abf3841ffacfdb757c10616f9cb1f67276 and fixed in 5.10.141 with commit dc815761948ab5b8c94db6cb53c95103588f16ae
	Issue introduced in 4.18 with commit c164d6abf3841ffacfdb757c10616f9cb1f67276 and fixed in 5.15.65 with commit 989560b6d9e00d99e07bc33067fa1c770994bf4d
	Issue introduced in 4.18 with commit c164d6abf3841ffacfdb757c10616f9cb1f67276 and fixed in 5.19.7 with commit dee1e51b54794e90763e70a3c78f27ba4fa930ec
	Issue introduced in 4.18 with commit c164d6abf3841ffacfdb757c10616f9cb1f67276 and fixed in 6.0 with commit cd11d1a6114bd4bc6450ae59f6e110ec47362126

Please see https://www.kernel.org for a full list of currently supported
kernel versions by the kernel community.

Unaffected versions might change over time as fixes are backported to
older supported kernel versions.  The official CVE entry at
	https://cve.org/CVERecord/?id=CVE-2022-49984
will be updated if fixes are backported, please check that for the most
up to date information about this issue.


Affected files
==============

The file(s) affected by this issue are:
	drivers/hid/hid-steam.c


Mitigation
==========

The Linux kernel CVE team recommends that you update to the latest
stable kernel version for this, and many other bugfixes.  Individual
changes are never tested alone, but rather are part of a larger kernel
release.  Cherry-picking individual commits is not recommended or
supported by the Linux kernel community at all.  If however, updating to
the latest release is impossible, the individual changes to resolve this
issue can be found at these commits:
	https://git.kernel.org/stable/c/c20d03b82a2e3ddbb555dad4d4f3374a9763222c
	https://git.kernel.org/stable/c/fa2b822d86be5b5ad54fe4fa2daca464e71ff90a
	https://git.kernel.org/stable/c/dc815761948ab5b8c94db6cb53c95103588f16ae
	https://git.kernel.org/stable/c/989560b6d9e00d99e07bc33067fa1c770994bf4d
	https://git.kernel.org/stable/c/dee1e51b54794e90763e70a3c78f27ba4fa930ec
	https://git.kernel.org/stable/c/cd11d1a6114bd4bc6450ae59f6e110ec47362126