Multiple array index errors in drivers/hid/hid-multitouch.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_MULTITOUCH is enabled, allow physically proximate attackers to cause a denial of service (heap memory corruption, or NULL pointer dereference and OOPS) via a crafted device.
Advisories
Source ID Title
EUVD EUVD EUVD-2013-2836 Multiple array index errors in drivers/hid/hid-multitouch.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_MULTITOUCH is enabled, allow physically proximate attackers to cause a denial of service (heap memory corruption, or NULL pointer dereference and OOPS) via a crafted device.
Ubuntu USN Ubuntu USN USN-2015-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-2016-1 Linux kernel (EC2) vulnerabilities
Ubuntu USN Ubuntu USN USN-2019-1 Linux kernel (Quantal HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-2020-1 Linux kernel (Raring HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-2021-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-2022-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-2023-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-2024-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-2038-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-2039-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-2050-1 Linux kernel (OMAP4) vulnerabilities
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Mon, 14 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00035}

epss

{'score': 0.00028}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2024-08-06T15:52:21.549Z

Reserved: 2013-04-11T00:00:00

Link: CVE-2013-2897

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2013-09-16T13:01:44.987

Modified: 2025-04-11T00:51:21.963

Link: CVE-2013-2897

cve-icon Redhat

Severity : Moderate

Publid Date: 2013-08-29T00:00:00Z

Links: CVE-2013-2897 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses