CVE Database›Document archive›CVE-2026-64427

CVE-2026-64427

kernel: HID: logitech-dj: Fix maxfield check in DJ short report validation

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 25, 2026

Updated · July 28, 2026

Description

A flaw was found in the Linux kernel's Human Interface Device (HID) Logitech DJ driver. This vulnerability arises from an incorrect check in the DJ short report validation, where a specially crafted device descriptor can lead to a null pointer dereference during device initialization. Successful exploitation of this flaw could allow a local attacker to cause a system crash, resulting in a denial of service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-476 · NULL Pointer Dereference