A flaw found in the Linux Kernel. The missing check causes a type confusion when issuing a list_entry()
on an empty report_list. The problem is caused by the assumption that the device must have valid report_list. While this will be true for all normal HID devices, a suitably malicious device can violate the assumption.
Created kernel tracking bugs for this issue:
Affects: fedora-all [bug 2173404]
This was fixed for Fedora with the 6.1.9 stable kernel updates.