Linux Kernel HID PIDFF Vulnerability in VRS DirectForce PRO

A vulnerability in the Linux kernel's Human Interface Device (HID) PIDFF (Physical Interface Device Force Feedback) handling has been addressed. The issue arose because the pool report, which can sometimes be inaccurate, was not properly refreshed before accessing its fields. This oversight led to a system error (oops) on the VRS DirectForce PRO device. The vulnerability has been resolved by ensuring the pool report is updated before field access. Additionally, the original while loop was replaced with a for loop, and exit conditions were adjusted to reduce the risk of an infinite loop.

Impact

Exploitation of this vulnerability could lead to a system error, causing a crash or unintended behavior in the application or device using the VRS DirectForce PRO.