CVE-2014-3184

Kernel: HID: off by one error in various _report_fixup routines

Published Sep 28, 2014 CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Description
The report_fixup functions in the HID subsystem in the Linux kernel before 3.16.2 might allow physically proximate attackers to cause a denial of service (out-of-bounds write) via a crafted device that provides a small report descriptor, related to (1) drivers/hid/hid-cherry.c, (2) drivers/hid/hid-kye.c, (3) drivers/hid/hid-lg.c, (4) drivers/hid/hid-monterey.c, (5) drivers/hid/hid-petalynx.c, and (6) drivers/hid/hid-sunplus.c.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-246-1 linux-2.6 security update
Debian DLA Debian DLA DLA-246-2 linux-2.6 regression update
EUVD EUVD EUVD-2014-3202 The report_fixup functions in the HID subsystem in the Linux kernel before 3.16.2 might allow physically proximate attackers to cause a denial of service (out-of-bounds write) via a crafted device that provides a small report descriptor, related to (1) drivers/hid/hid-cherry.c, (2) drivers/hid/hid-kye.c, (3) drivers/hid/hid-lg.c, (4) drivers/hid/hid-monterey.c, (5) drivers/hid/hid-petalynx.c, and (6) drivers/hid/hid-sunplus.c.
Ubuntu USN Ubuntu USN USN-2374-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-2375-1 Linux kernel (EC2) vulnerabilities
Ubuntu USN Ubuntu USN USN-2376-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-2377-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-2378-1 Linux kernel (Trusty HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-2379-1 Linux kernel vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
Chrome
Published
Updated
Aug 6, 2024, 10:35 AM
Reserved
May 3, 2014, 12:00 AM
Status
Modified
Published
Sep 28, 2014, 10:55 AM
Modified
Jun 17, 2026, 12:07 AM
Severity
Low
Public date
Aug 21, 2014, 12:00 AM