CVE-2014-3182

MediumCVSS 6.9/10Last modified Jun 17, 2026

Description

Array index error in the logi_dj_raw_event function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows physically proximate attackers to execute arbitrary code or cause a denial of service (invalid kfree) via a crafted device that provides a malformed REPORT_TYPE_NOTIF_DEVICE_UNPAIRED value.

Metrics

CVSS 2.0 6.9/10AV:L/AC:M/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad3e14d7c5268c2e24477c6ef54bbdf88add5d36Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1318.htmlThird Party Advisory, VDB Entry
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.2Mailing List, VDB Entry
http://www.openwall.com/lists/oss-security/2014/09/11/21Mailing List
http://www.securityfocus.com/bid/69770Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1141210Issue Tracking
https://code.google.com/p/google-security-research/issues/detail?id=89Third Party Advisory
https://github.com/torvalds/linux/commit/ad3e14d7c5268c2e24477c6ef54bbdf88add5d36Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad3e14d7c5268c2e24477c6ef54bbdf88add5d36Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1318.htmlThird Party Advisory, VDB Entry
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.2Mailing List, VDB Entry
http://www.openwall.com/lists/oss-security/2014/09/11/21Mailing List
http://www.securityfocus.com/bid/69770Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1141210Issue Tracking
https://code.google.com/p/google-security-research/issues/detail?id=89Third Party Advisory
https://github.com/torvalds/linux/commit/ad3e14d7c5268c2e24477c6ef54bbdf88add5d36Third Party Advisory

Timeline

Published: Sep 28, 2014
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-31836.9Heap-based buffer overflow in the logi_dj_ll_raw_request function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows CVE-2014-31844.7The report_fixup functions in the HID subsystem in the Linux kernel before 3.16.2 might allow physically proximate attackers to cause a deni CVE-2014-31856.9Multiple buffer overflows in the command_port_read_callback function in drivers/usb/serial/whiteheat.c in the Whiteheat USB Serial Driver in CVE-2014-31866.9Buffer overflow in the picolcd_raw_event function in devices/hid/hid-picolcd_core.c in the PicoLCD HID device driver in the Linux kernel thr CVE-2014-31876.8Google Chrome before 37.0.2062.60 and 38.x before 38.0.2125.59 on iOS does not properly restrict processing of (1) facetime:// and (2) facet CVE-2014-318810.0Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which all CVE-2014-31897.5The chrome_pdf::CopyImage function in pdf/draw_utils.cc in the PDFium component in Google Chrome before 38.0.2125.101 does not properly vali CVE-2014-31907.5Use-after-free vulnerability in the Event::currentTarget function in core/events/Event.cpp in Blink, as used in Google Chrome before 38.0.21 CVE-2014-31917.5Use-after-free vulnerability in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service o CVE-2014-31927.5Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom/ProcessingInstruction.cpp in the DOM implem CVE-2014-31937.5The SessionService::GetLastSession function in browser/sessions/session_service.cc in Google Chrome before 38.0.2125.101 allows remote attac CVE-2014-31947.5Use-after-free vulnerability in the Web Workers implementation in Google Chrome before 38.0.2125.101 allows remote attackers to cause a deni