Threats tagged 'ghsa-jxxv-c48x-753p'

CVE-2025-21948 is a vulnerability in the Linux kernel's appleir HID driver that can cause a NULL pointer dereference due to malformed report items from an emulated device. This leads to an event callback being invoked without an associated input device, potentially causing a kernel crash. The issue was discovered by the Linux Verification Center using Syzkaller. A fix involves adding a check for the HID_CLAIMED_INPUT flag to prevent the event hook from proceeding if no input device is claimed.