CVE-2013-2889

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.11

Description The issue is related to a lack of input data clearing in the HID driver for Zeroplus game controllers, leading to a local denial of service. Specifically, in the Linux kernel, the drivers/hid/hid-zpff.c file in the Human Interface Device (HID) subsystem is affected when CONFIG HID ZEROPLUS is enabled. This allows physically proximate attackers to cause a denial of service via a crafted device, resulting in a heap-based out-of-bounds write.

Recommendations For Linux kernel versions prior to 3.11, consider disabling the CONFIG HID ZEROPLUS configuration to minimize the risk of exploitation until a patch is available.