The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 16, 2013 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Sep 13, 2013 |
| Suse | — | Upgrade xen-kmp-paeUpgrade ext4dev-kmp-traceUpgrade kernel-defaultUpgrade ocfs2-kmp-rt_traceUpgrade kernel-pae-develUpgrade kernel-symsUpgrade kernel-kdumpUpgrade kernel-bigsmpUpgrade kernel-ppc64-baseUpgrade kernel-xenpaeUpgrade kernel-trace-baseUpgrade cluster-network-kmp-defaultUpgrade ocfs2-kmp-traceUpgrade btrfs-kmp-defaultUpgrade ofed-kmp-rt_traceUpgrade hyper-v-kmp-defaultUpgrade cluster-network-kmp-paeUpgrade kernel-ec2Upgrade kernel-default-baseUpgrade kernel-default-extraUpgrade ocfs2-kmp-ppc64Upgrade kernel-bigsmp-develUpgrade ext4dev-kmp-paeUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-syms-rtUpgrade cluster-network-kmp-rtUpgrade cluster-network-kmp-rt_traceUpgrade gfs2-kmp-ppc64Upgrade btrfs-kmp-xenUpgrade kernel-debugUpgrade kernel-ec2-develUpgrade kernel-paeUpgrade iscsitarget-kmp-rt_traceUpgrade gfs2-kmp-bigsmpUpgrade hyper-v-kmp-traceUpgrade hyper-v-kmp-paeUpgrade ocfs2-kmp-xenUpgrade kernel-pae-baseUpgrade cluster-network-kmp-ppc64Upgrade kernel-trace-develUpgrade ocfs2-kmp-paeUpgrade kernel-rt_traceUpgrade drbd-kmp-rt_traceUpgrade xen-kmp-traceUpgrade kernel-kdumppaeUpgrade cluster-network-kmp-bigsmpUpgrade kernel-vmipaeUpgrade kernel-default-manUpgrade kernel-rt_trace-baseUpgrade kernel-bigsmp-baseUpgrade gfs2-kmp-defaultUpgrade kernel-vmiUpgrade ext4dev-kmp-defaultUpgrade cluster-network-kmp-traceUpgrade kernel-ppc64-develUpgrade kernel-xenUpgrade ocfs2-kmp-rtUpgrade kernel-rt-baseUpgrade ocfs2-kmp-bigsmpUpgrade ext4dev-kmp-xenUpgrade drbd-kmp-rtUpgrade kernel-xen-baseUpgrade gfs2-kmp-xenUpgrade xen-kmp-defaultUpgrade kernel-rt_trace-develUpgrade cluster-network-kmp-xenUpgrade gfs2-kmp-traceUpgrade sle-hae-releaseUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-traceUpgrade kernel-pae-extraUpgrade kernel-ec2-baseUpgrade kernel-rtUpgrade lttng-modules-kmp-rtUpgrade kernel-xen-extraUpgrade kernel-smpUpgrade kernel-sourceUpgrade ofed-kmp-rtUpgrade kernel-default-develUpgrade ocfs2-kmp-defaultUpgrade kernel-ppc64Upgrade btrfs-kmp-paeUpgrade iscsitarget-kmp-rtUpgrade gfs2-kmp-paeUpgrade kernel-xen-develUpgrade kernel-rt-develUpgrade kernel-source-rt | Feb 17, 2015 | Sep 16, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-53-386Upgrade linux-image-3.2.0-57-highbankUpgrade linux-image-3.2.0-57-powerpc64-smpUpgrade linux-image-2.6.32-53-powerpcUpgrade linux-image-3.2.0-57-virtualUpgrade linux-image-3.2.0-57-generic-paeUpgrade linux-image-2.6.32-53-lpiaUpgrade linux-image-3.2.0-57-genericUpgrade linux-image-3.5.0-43-genericUpgrade linux-image-3.5.0-235-omap4Upgrade linux-image-2.6.32-53-preemptUpgrade linux-image-2.6.32-53-serverUpgrade linux-image-3.5.0-43-highbankUpgrade linux-image-2.6.32-53-powerpc64-smpUpgrade linux-image-2.6.32-358-ec2Upgrade linux-image-2.6.32-53-genericUpgrade linux-image-2.6.32-53-virtualUpgrade linux-image-3.5.0-43-omapUpgrade linux-image-2.6.32-53-versatileUpgrade linux-image-2.6.32-53-sparc64Upgrade linux-image-3.5.0-43-powerpc64-smpUpgrade linux-image-3.8.0-33-genericUpgrade linux-image-2.6.32-53-ia64Upgrade linux-image-2.6.32-53-powerpc-smpUpgrade linux-image-3.2.0-1441-omap4Upgrade linux-image-3.2.0-57-omapUpgrade linux-image-3.5.0-43-powerpc-smpUpgrade linux-image-3.2.0-57-powerpc-smpUpgrade linux-image-2.6.32-53-sparc64-smpUpgrade linux-image-3.5.0-236-omap4Upgrade linux-image-2.6.32-53-generic-pae | Nov 8, 2024 | Sep 16, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub