PT-2013-4014
CVE-2013-2896
·
Published
2013-09-13
·
Updated
2014-04-02
Description by
CVSS 2.0
4.7
MediumMetricsAV:L/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 3.11
Description
The issue allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted device. This is related to the Human Interface Device (HID) subsystem when CONFIG HID NTRIG is enabled.
Recommendations
For Linux kernel versions prior to 3.11, consider disabling the CONFIG HID NTRIG configuration to minimize the risk of exploitation as a temporary workaround.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾