Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix maxfield check in DJ short report validation Commit… (CVE-2026-64427)

The Linux kernel's HID Logitech DJ driver contained a flaw in the validation logic for DJ short output reports. Specifically, when a crafted report with report ID 0x20 containing only padding output items is registered, the driver sets rep->maxfield to zero but still attempts to dereference rep->field[0]->report_count during error handling. This results in a NULL pointer dereference and kernel crash during device probe. The issue arises because the validation code does not properly reject zero-field reports before accessing field data. This vulnerability was identified and fixed by rejecting zero-field reports before printing the field report_count.

This vulnerability causes a NULL pointer dereference in the kernel, leading to a denial of service via a kernel crash during device probing of a maliciously crafted HID device report. There is no indication of confidentiality or integrity impact, only availability is affected.

A fix is available in the Linux kernel that rejects zero-field reports before accessing field data, preventing the NULL pointer dereference. Users should apply the official kernel updates that include this patch. Since this is not a cloud service, remediation requires updating the affected Linux kernel version.