CVE-2026-64427

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix maxfield check in DJ short report validation Commit b6a57912854e "HID: logitech-dj: Prevent REPORTIDDJSHORT related user initiated OOB write" added validation for the DJ short output report, but the error pa...

CVE-2026-64427

CVE-2026-64427 is a NULL pointer dereference in the Linux kernel's HID Logitech DJ driver (hid_logitech_dj). A specially crafted device descriptor that creates a DJ short output report (report ID 0x20) containing only padding items causes rep->maxfield to remain zero. When the validation error...