NetSight
IP …
medium5.5

CVE-2025-39808

In the Linux kernel, the following vulnerability has been resolved: HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() in ntrig_report_v…

Impact

In the Linux kernel, the following vulnerability has been resolved: HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() in ntrig_report_version(), hdev parameter passed from hid_probe(). sending descriptor to /dev/uhid can make hdev->dev.parent->parent to null if hdev->dev.parent->parent is null, usb_dev has invalid address(0xffffffffffffff58) that hid_to_usb_dev(hdev) returned when usb_rcvctrlpipe() use usb_dev,it trigger page fault error for address(0xffffffffffffff58) add null check logic to ntrig_report_version() before calling hid_to_usb_dev()

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.37 before 5.4.298
from 5.5 before 5.10.242
from 5.11 before 5.15.191
from 5.16 before 6.1.150
from 6.2 before 6.6.104
from 6.7 before 6.12.45
DebianDebian Linux
Version 11.0

References