Linux Kernel Vulnerability in HID Ntrig Device

CVE-2025-39808

What is CVE-2025-39808?

A vulnerability in the Linux kernel's HID Ntrig driver allows for a null pointer dereference in the ntrig_report_version() function. If the hdev parameter passed from hid_probe() leads to a null parent device, it can result in an invalid USB device address being used. This can trigger a page fault when interacting with the affected devices, potentially compromising system stability. A fix has been implemented by adding null check logic to handle this scenario safely.

References