Threats tagged 'ghsa-8868-h956-r68g'

CVE-2025-21794 is a high-severity vulnerability in the Linux kernel's hid-thrustmaster driver. It involves a stack-out-of-bounds read caused by the usb_check_int_endpoints() function iterating beyond the end of the ep_addr array. This flaw can lead to a kernel crash due to reading non-existent memory. The issue was fixed by adding a terminating zero element to the array to properly end the loop.