CVE-2025-21948 HID: appleir: Fix potential NULL dereference at raw event handle

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CVE-2025-21948 and CVE-2024-43913 Published by Microsoft Microsoft published information on two vulnerabilities: CVE-2025-21948, a potential NULL dereference issue in HID, and CVE-2024-43913, related to device reference counting in nvme. Both vulnerabilities are critical for affected systems and require immediate attention from users and administrators. 2 sources 46