Bug 2368520 (CVE-2025-37942) - CVE-2025-37942 kernel: HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX
Summary: CVE-2025-37942 kernel: HID: pidff: Make sure to fetch pool before checking SI...
Keywords:
Status: NEW
Alias: CVE-2025-37942
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-05-26 07:03 UTC by OSIDB Bzimport
Modified: 2025-06-11 12:24 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2025-05-26 07:03:46 UTC
In the Linux kernel, the following vulnerability has been resolved:

HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX

As noted by Anssi some 20 years ago, pool report is sometimes messed up.
This worked fine on many devices but casued oops on VRS DirectForce PRO.

Here, we're making sure pool report is refetched before trying to access
any of it's fields. While loop was replaced with a for loop + exit
conditions were moved aroud to decrease the possibility of creating an
infinite loop scenario.

Comment 1 Avinash Hanwate 2025-05-26 11:39:12 UTC
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025052043-CVE-2025-37942-fbca@gregkh/T


Note You need to log in before you can comment on or make changes to this bug.