Security Advisory

CVE-2014-3182

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-09-28 10:00:00
Last updated 2024-08-06 10:35:57
Assigner Chrome
CVSS score not scored
State PUBLISHED

Description

Array index error in the logi_dj_raw_event function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows physically proximate attackers to execute arbitrary code or cause a denial of service (invalid kfree) via a crafted device that provides a malformed REPORT_TYPE_NOTIF_DEVICE_UNPAIRED value.