CVE-2026-64427

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the logi dj probe() function during the probing process. This happens when a crafted descriptor creates a report ID 0x20 containing only padding output items. In this scenario, the hid-core registers the report but ignores the padding field, leaving the rep->maxfield variable as zero. The validation logic then enters a branch where rep->maxfield < 1 and attempts to dereference rep->field[0]->report count to print an error message, leading to the crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.