CVE-2013-2888

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.11

Description The issue is related to multiple array index errors in the Human Interface Device (HID) subsystem, specifically in the drivers/hid/hid-core.c file. This allows physically proximate attackers to potentially execute arbitrary code or cause a denial of service due to heap memory corruption. The attack can be initiated via a crafted device that provides an invalid Report ID.

Recommendations For Linux kernel versions prior to 3.11, update to a version 3.11 or later to resolve the issue.