01 Record

CVE-2025-37862

HID: pidff: Fix null pointer dereference in pidff_find_fields

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

HID: pidff: Fix null pointer dereference in pidff_find_fields

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.29% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 21.4% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-05-09 06:42Z1 YR AGO

Last updated

2026-05-11 21:16Z3 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.2

Document digest

43ec8f97ee0eb96399a099eff5aab1730d59c2b26232b252274199ee4fc1272e

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux224ee88fe39564358ec99b46bf3ee6e6999ae17d to < 44a1b8b2027afbb37e418993fb23561bdb9efb38, 224ee88fe39564358ec99b46bf3ee6e6999ae17d to < d230becb9d38b7325c5c38d051693e4c26b1829b, 224ee88fe39564358ec99b46bf3ee6e6999ae17d to < 6b4449e4f03326fbd2136e67bfcc1e6ffe61541d, 224ee88fe39564358ec99b46bf3ee6e6999ae17d to < ddb147885225d768025f6818df533d30edf3e102, 224ee88fe39564358ec99b46bf3ee6e6999ae17d to < be706a48bb7896d4130edc82811233d1d62158e7, 224ee88fe39564358ec99b46bf3ee6e6999ae17d to < f8f4d77710e1c38f4a2bd26c88c4878b5b5e817a, 224ee88fe39564358ec99b46bf3ee6e6999ae17d to < 3a507184f9307e19cb441b897c49e7843c94e56b, 224ee88fe39564358ec99b46bf3ee6e6999ae17d to < e368698da79af821f18c099520deab1219c2044b, 224ee88fe39564358ec99b46bf3ee6e6999ae17d to < 22a05462c3d0eee15154faf8d13c49e6295270a5, 2.6.19—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/44a1b8b2027afbb37e418993fb23561bdb9efb38
git.kernel.orghttps://git.kernel.org/stable/c/d230becb9d38b7325c5c38d051693e4c26b1829b
git.kernel.orghttps://git.kernel.org/stable/c/6b4449e4f03326fbd2136e67bfcc1e6ffe61541d
git.kernel.orghttps://git.kernel.org/stable/c/ddb147885225d768025f6818df533d30edf3e102
git.kernel.orghttps://git.kernel.org/stable/c/be706a48bb7896d4130edc82811233d1d62158e7
git.kernel.orghttps://git.kernel.org/stable/c/f8f4d77710e1c38f4a2bd26c88c4878b5b5e817a
git.kernel.orghttps://git.kernel.org/stable/c/3a507184f9307e19cb441b897c49e7843c94e56b
git.kernel.orghttps://git.kernel.org/stable/c/e368698da79af821f18c099520deab1219c2044b
git.kernel.orghttps://git.kernel.org/stable/c/22a05462c3d0eee15154faf8d13c49e6295270a5
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00030.html

01 Record index

CVE-2025-37862

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-37862

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References