Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAE-develUpgrade kernel-docUpgrade kernel-xenUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-PAEUpgrade kernel-develUpgrade kernel-xen-devel | Dec 1, 2016 | Sep 16, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 16, 2013 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jun 2, 2014 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Sep 13, 2013 |
| Suse | — | Upgrade kernel-kdumppaeUpgrade kernel-symsUpgrade ext4dev-kmp-defaultUpgrade kernel-vmiUpgrade btrfs-kmp-paeUpgrade kernel-traceUpgrade kernel-ec2-develUpgrade kernel-sourceUpgrade kernel-vmipaeUpgrade xen-kmp-traceUpgrade kernel-default-develUpgrade kernel-xenUpgrade ext4dev-kmp-paeUpgrade kernel-default-manUpgrade kernel-smpUpgrade hyper-v-kmp-paeUpgrade kernel-pae-baseUpgrade kernel-ec2-baseUpgrade kernel-pae-develUpgrade kernel-debugUpgrade kernel-default-baseUpgrade hyper-v-kmp-defaultUpgrade kernel-defaultUpgrade ext4dev-kmp-traceUpgrade xen-kmp-paeUpgrade kernel-xen-baseUpgrade btrfs-kmp-xenUpgrade kernel-xen-develUpgrade hyper-v-kmp-traceUpgrade kernel-ec2Upgrade kernel-bigsmpUpgrade kernel-trace-baseUpgrade ext4dev-kmp-xenUpgrade kernel-trace-develUpgrade btrfs-kmp-defaultUpgrade kernel-kdumpUpgrade kernel-paeUpgrade kernel-xenpaeUpgrade xen-kmp-default | Feb 17, 2015 | Sep 16, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-52-powerpc-smpUpgrade linux-image-3.5.0-43-highbankUpgrade linux-image-3.2.0-1441-omap4Upgrade linux-image-3.2.0-57-omapUpgrade linux-image-2.6.32-52-serverUpgrade linux-image-3.5.0-43-powerpc64-smpUpgrade linux-image-3.5.0-235-omap4Upgrade linux-image-3.2.0-57-highbankUpgrade linux-image-3.8.0-32-genericUpgrade linux-image-2.6.32-52-versatileUpgrade linux-image-3.5.0-236-omap4Upgrade linux-image-3.2.0-57-genericUpgrade linux-image-2.6.32-52-generic-paeUpgrade linux-image-3.2.0-57-generic-paeUpgrade linux-image-3.5.0-43-omapUpgrade linux-image-2.6.32-52-lpiaUpgrade linux-image-2.6.32-52-sparc64-smpUpgrade linux-image-2.6.32-52-sparc64Upgrade linux-image-3.5.0-43-genericUpgrade linux-image-2.6.32-52-386Upgrade linux-image-2.6.32-52-ia64Upgrade linux-image-3.2.0-57-virtualUpgrade linux-image-2.6.32-52-powerpc64-smpUpgrade linux-image-2.6.32-52-virtualUpgrade linux-image-3.2.0-57-powerpc64-smpUpgrade linux-image-3.2.0-57-powerpc-smpUpgrade linux-image-2.6.32-52-powerpcUpgrade linux-image-3.5.0-43-powerpc-smpUpgrade linux-image-2.6.32-52-preemptUpgrade linux-image-2.6.32-357-ec2Upgrade linux-image-2.6.32-52-generic | Nov 8, 2024 | Sep 16, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub