CVE-2026-45969: HID: playstation: Add missing check for input_ff_create_memless
In the Linux kernel, the following vulnerability has been resolved:
HID: playstation: Add missing check for inputffcreatememless
The psgamepadcreate() function calls inputffcreatememless() without verifying its return value, which can lead to incorrect behavior or potential crashes when FF effects are triggered.
Add a check for the return value of inputffcreatememless().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Modify ps_gamepad_create() to check the return value of input_ff_create_memless() and handle error cases (for example abort initialization or use a safe fallback) to avoid incorrect behavior or crashes when force-feedback effects are triggered.
Linux kernel (playstation driver / ps_gamepad_create) input_ff_create_memless return value check = verify return and handle failure
Event History
Frequently Asked Questions
What is the severity of CVE-2026-45969?
CVE-2026-45969 has a medium severity rating of 5.5 according to the CVSS 3.1 metrics.
How do I fix CVE-2026-45969?
Fixing CVE-2026-45969 involves updating the Linux kernel to the latest version where this vulnerability has been resolved.
What risks are associated with CVE-2026-45969?
CVE-2026-45969 can lead to incorrect behavior or potential crashes when handling specific input from PlayStation gamepads.
What software is affected by CVE-2026-45969?
CVE-2026-45969 affects the Linux kernel, specifically the hid-playstation driver.
What type of vulnerability is CVE-2026-45969?
CVE-2026-45969 is categorized as a Null Pointer Dereference vulnerability.