CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields
Published May 9, 2025
·Updated
HID: pidff: Fix null pointer dereference in pidfffindfields
Affected Software
12 affected componentsFixes available
Linux Linux kernel
Linux Linux kernel<5.4.293
Linux Linux kernel>=5.5<5.10.237
Linux Linux kernel>=5.11<5.15.181
Linux Linux kernel>=5.16<6.1.135
Linux Linux kernel>=6.2<6.6.88
Linux Linux kernel>=6.7<6.12.24
Linux Linux kernel>=6.13<6.13.12
Linux Linux kernel>=6.14<6.14.3
Debian Debian Linux=11.0
Microsoft azl3 kernel 6.6.92.2-1
Microsoft azl3 kernel 6.6.85.1-4
Remediation
Event History
May 9, 2025
CVE Published
via MITRE·06:42 AM
Data Sourced
via MITRE·06:42 AM
Description
Data Sourced
via NVD·07:16 AM
RemedyDescriptionSeverityWeaknessAffected Software
Jul 11, 2025
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
SeverityAffected Software
Updated
via Microsoft·07:00 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2025-37862?
CVE-2025-37862 has been classified as a moderate severity vulnerability due to its potential for causing crashes in affected systems.
2
How do I fix CVE-2025-37862?
To fix CVE-2025-37862, update your Linux kernel to the latest version where this vulnerability has been addressed.
3
What are the consequences of not addressing CVE-2025-37862?
If CVE-2025-37862 is not addressed, it may lead to system instability due to null pointer dereferences when searching for unsupported reports.
4
Which versions of the Linux kernel are affected by CVE-2025-37862?
CVE-2025-37862 affects certain implementations of the Linux kernel where the pidff_find_fields function is used.
5
What components are involved in CVE-2025-37862?
CVE-2025-37862 primarily involves the Human Interface Device (HID) subsystem of the Linux kernel.