Linux Kernel HID PIDFF Null Pointer Dereference Vulnerability

A null pointer dereference vulnerability has been identified in the Linux kernel's Human Interface Device (HID) PIDFF (Physical Interface Device Force Feedback) subsystem. The issue arises in the 'pidff_find_fields' function, which can dereference a null pointer when searching for a report that is not implemented on the device. This vulnerability affects both optional and required reports. Although the 'pidff_init_fields' function is designed to return an error if a required report is missing, future changes could alter this behavior, potentially reintroducing the null pointer dereference.

Impact

Exploitation of this vulnerability leads to a null pointer dereference, causing a crash or denial of service by interrupting the normal operation of the system.