Multiple array index errors in drivers/hid/hid-multitouch.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_MULTITOUCH is enabled, allow physically proximate attackers to cause a denial of service (heap memory corruption, or NULL pointer dereference and OOPS) via a crafted device.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 16, 2013 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Sep 13, 2013 |
| Suse | — | Upgrade kernel-symsUpgrade cluster-network-kmp-rtUpgrade kernel-xenUpgrade btrfs-kmp-paeUpgrade lttng-modules-kmp-rt_traceUpgrade ext4dev-kmp-xenUpgrade sle-hae-releaseUpgrade kernel-xen-extraUpgrade cluster-network-kmp-defaultUpgrade kernel-vmiUpgrade cluster-network-kmp-paeUpgrade xen-kmp-traceUpgrade kernel-default-manUpgrade kernel-kdumpUpgrade kernel-bigsmp-develUpgrade drbd-kmp-rt_traceUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-pae-baseUpgrade kernel-xen-develUpgrade ocfs2-kmp-rtUpgrade kernel-source-rtUpgrade kernel-traceUpgrade kernel-trace-baseUpgrade kernel-ec2Upgrade btrfs-kmp-xenUpgrade hyper-v-kmp-paeUpgrade drbd-kmp-rtUpgrade kernel-pae-develUpgrade kernel-trace-develUpgrade cluster-network-kmp-xenUpgrade kernel-debugUpgrade hyper-v-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-bigsmpUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-paeUpgrade cluster-network-kmp-traceUpgrade ocfs2-kmp-xenUpgrade kernel-rt-baseUpgrade ocfs2-kmp-rt_traceUpgrade kernel-default-baseUpgrade ext4dev-kmp-defaultUpgrade ocfs2-kmp-paeUpgrade ext4dev-kmp-traceUpgrade kernel-ppc64Upgrade ocfs2-kmp-defaultUpgrade kernel-rt_traceUpgrade kernel-rt-develUpgrade kernel-rt_trace-develUpgrade gfs2-kmp-ppc64Upgrade kernel-ppc64-develUpgrade lttng-modules-kmp-rtUpgrade kernel-xen-baseUpgrade ocfs2-kmp-ppc64Upgrade kernel-xenpaeUpgrade kernel-defaultUpgrade kernel-ec2-baseUpgrade iscsitarget-kmp-rtUpgrade ocfs2-kmp-bigsmpUpgrade kernel-rtUpgrade gfs2-kmp-traceUpgrade ocfs2-kmp-traceUpgrade ofed-kmp-rt_traceUpgrade cluster-network-kmp-ppc64Upgrade xen-kmp-defaultUpgrade ext4dev-kmp-paeUpgrade kernel-ec2-develUpgrade hyper-v-kmp-traceUpgrade ofed-kmp-rtUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-vmipaeUpgrade gfs2-kmp-bigsmpUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-paeUpgrade kernel-pae-extraUpgrade xen-kmp-paeUpgrade kernel-bigsmp-baseUpgrade cluster-network-kmp-rt_traceUpgrade btrfs-kmp-defaultUpgrade kernel-smpUpgrade kernel-sourceUpgrade kernel-kdumppaeUpgrade cluster-network-kmp-bigsmpUpgrade kernel-ppc64-baseUpgrade gfs2-kmp-xenUpgrade kernel-rt_trace-base | Feb 17, 2015 | Sep 16, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-57-highbankUpgrade linux-image-3.5.0-43-highbankUpgrade linux-image-3.5.0-236-omap4Upgrade linux-image-2.6.32-53-sparc64Upgrade linux-image-3.2.0-57-powerpc64-smpUpgrade linux-image-2.6.32-358-ec2Upgrade linux-image-3.2.0-57-genericUpgrade linux-image-3.2.0-57-omapUpgrade linux-image-2.6.32-53-versatileUpgrade linux-image-3.5.0-43-genericUpgrade linux-image-2.6.32-53-preemptUpgrade linux-image-2.6.32-53-386Upgrade linux-image-2.6.32-53-genericUpgrade linux-image-3.5.0-43-omapUpgrade linux-image-3.5.0-43-powerpc-smpUpgrade linux-image-3.2.0-57-generic-paeUpgrade linux-image-2.6.32-53-generic-paeUpgrade linux-image-3.2.0-57-powerpc-smpUpgrade linux-image-3.2.0-57-virtualUpgrade linux-image-3.5.0-43-powerpc64-smpUpgrade linux-image-3.5.0-235-omap4Upgrade linux-image-2.6.32-53-sparc64-smpUpgrade linux-image-2.6.32-53-serverUpgrade linux-image-2.6.32-53-powerpc-smpUpgrade linux-image-2.6.32-53-powerpc64-smpUpgrade linux-image-2.6.32-53-powerpcUpgrade linux-image-2.6.32-53-ia64Upgrade linux-image-2.6.32-53-lpiaUpgrade linux-image-3.8.0-33-genericUpgrade linux-image-2.6.32-53-virtualUpgrade linux-image-3.2.0-1441-omap4 | Nov 8, 2024 | Sep 16, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub