CVE-2013-2898

Published: 16 September 2013

drivers/hid/hid-sensor-hub.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_SENSOR_HUB is enabled, allows physically proximate attackers to obtain sensitive information from kernel memory via a crafted device.

From the Ubuntu security team

Kees Cook discovered an information leak in the Linux kernel's Human Interface Device (HID) subsystem when CONFIG_HID_SENSOR_HUB is enabled. A physically proximate attacker could obtain potentially sensitive information from kernel memory via a specially crafted device.

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2898
• http://www.openwall.com/lists/oss-security/2013/08/28/13
• https://ubuntu.com/security/notices/USN-1995-1
• https://ubuntu.com/security/notices/USN-1998-1
• NVD
• Launchpad
• Debian

Bugs

• https://launchpad.net/bugs/1220206