The Linux kernel hid_logitech_dj driver contains a NULL pointer dereference during probe when a device presents a DJ short output report that contains only padding items. The validation code checks rep->maxfield, finds it zero, and then dereferences rep->field[0]->report_count while logging an error. This dereference triggers a KASAN null‑ptr‑deref and causes a kernel OOPS, which crashes the kernel and requires a reboot. The weakness corresponds to CWE‑476 and results in denial of service without privilege escalation.

Any Linux kernel that includes the hid_logitech_dj driver before the patch that added the presence check for rep—specifically kernel releases older than commit 8b9a097eb2fc. All distributions shipping those kernels, including common Linux distributions and custom builds that load the hid_logitech_dj module, are affected.

The EPSS score is less than 1%, indicating a very low but non‑zero probability of exploitation, and the vulnerability is not listed in CISA’s KEV catalog. An attacker would need to supply a malicious HID descriptor either via a physical Logitech receiver or a virtual uhid device; such an attack is local in scope. Successful exploitation causes a kernel crash that forces a reboot, but does not grant further privileges or allow remote execution. The combined low adoption probability and limited denial‑of‑service impact result in a low overall risk.