The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 16, 2013 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Sep 13, 2013 |
| Suse | — | Upgrade ext4dev-kmp-defaultUpgrade kernel-ppc64Upgrade kernel-sourceUpgrade gfs2-kmp-traceUpgrade kernel-default-develUpgrade lttng-modules-kmp-rtUpgrade kernel-vmiUpgrade kernel-xen-extraUpgrade kernel-xen-baseUpgrade drbd-kmp-rtUpgrade kernel-ppc64-develUpgrade gfs2-kmp-defaultUpgrade cluster-network-kmp-traceUpgrade kernel-rtUpgrade ocfs2-kmp-defaultUpgrade sle-hae-releaseUpgrade kernel-rt-baseUpgrade ofed-kmp-rtUpgrade kernel-xen-develUpgrade gfs2-kmp-xenUpgrade ocfs2-kmp-bigsmpUpgrade kernel-traceUpgrade ocfs2-kmp-rtUpgrade kernel-pae-extraUpgrade kernel-ec2-baseUpgrade kernel-smpUpgrade ext4dev-kmp-xenUpgrade kernel-source-rtUpgrade kernel-xenUpgrade kernel-rt_trace-baseUpgrade btrfs-kmp-paeUpgrade cluster-network-kmp-xenUpgrade kernel-rt-develUpgrade iscsitarget-kmp-rtUpgrade kernel-rt_trace-develUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-bigsmp-baseUpgrade xen-kmp-defaultUpgrade gfs2-kmp-paeUpgrade ext4dev-kmp-traceUpgrade kernel-pae-develUpgrade kernel-ppc64-baseUpgrade kernel-default-baseUpgrade drbd-kmp-rt_traceUpgrade ocfs2-kmp-traceUpgrade ocfs2-kmp-rt_traceUpgrade kernel-ec2Upgrade kernel-xenpaeUpgrade kernel-debugUpgrade kernel-defaultUpgrade kernel-bigsmpUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-symsUpgrade kernel-trace-baseUpgrade hyper-v-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade ocfs2-kmp-xenUpgrade xen-kmp-traceUpgrade cluster-network-kmp-paeUpgrade kernel-vmipaeUpgrade kernel-rt_traceUpgrade gfs2-kmp-ppc64Upgrade kernel-paeUpgrade xen-kmp-paeUpgrade kernel-pae-baseUpgrade cluster-network-kmp-bigsmpUpgrade hyper-v-kmp-traceUpgrade ofed-kmp-rt_traceUpgrade btrfs-kmp-defaultUpgrade kernel-kdumppaeUpgrade kernel-syms-rtUpgrade gfs2-kmp-bigsmpUpgrade btrfs-kmp-xenUpgrade lttng-modules-kmp-rt_traceUpgrade cluster-network-kmp-rtUpgrade cluster-network-kmp-rt_traceUpgrade kernel-bigsmp-develUpgrade kernel-default-extraUpgrade ocfs2-kmp-ppc64Upgrade ext4dev-kmp-paeUpgrade kernel-trace-develUpgrade kernel-ec2-develUpgrade kernel-default-manUpgrade ocfs2-kmp-paeUpgrade cluster-network-kmp-ppc64Upgrade kernel-kdumpUpgrade hyper-v-kmp-pae | Feb 17, 2015 | Sep 16, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-53-virtualUpgrade linux-image-3.2.0-57-omapUpgrade linux-image-2.6.32-53-sparc64Upgrade linux-image-3.2.0-1441-omap4Upgrade linux-image-2.6.32-53-versatileUpgrade linux-image-2.6.32-53-powerpc-smpUpgrade linux-image-3.8.0-33-genericUpgrade linux-image-3.2.0-57-powerpc-smpUpgrade linux-image-2.6.32-53-ia64Upgrade linux-image-3.5.0-43-powerpc64-smpUpgrade linux-image-2.6.32-53-generic-paeUpgrade linux-image-2.6.32-53-sparc64-smpUpgrade linux-image-3.5.0-43-omapUpgrade linux-image-3.5.0-236-omap4Upgrade linux-image-3.5.0-43-powerpc-smpUpgrade linux-image-2.6.32-53-lpiaUpgrade linux-image-2.6.32-53-genericUpgrade linux-image-3.5.0-43-genericUpgrade linux-image-3.2.0-57-genericUpgrade linux-image-3.2.0-57-powerpc64-smpUpgrade linux-image-3.2.0-57-virtualUpgrade linux-image-3.2.0-57-generic-paeUpgrade linux-image-2.6.32-53-preemptUpgrade linux-image-3.5.0-43-highbankUpgrade linux-image-3.2.0-57-highbankUpgrade linux-image-2.6.32-53-powerpcUpgrade linux-image-2.6.32-53-386Upgrade linux-image-2.6.32-358-ec2Upgrade linux-image-2.6.32-53-powerpc64-smpUpgrade linux-image-2.6.32-53-serverUpgrade linux-image-3.5.0-235-omap4 | Nov 8, 2024 | Sep 16, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub