UBUNTU-CVE-2014-3184
Advisory lineage Upstream: 1 Downstream: 1
Upstream
Downstream
Published: 28 Sept 2014, 00:00
Last modified:12 May 2026, 13:18
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
28 Sept 2014, 00:00
Published
Vulnerability first disclosed
12 May 2026, 13:18
Last Modified
Vulnerability information updated
Description
The report_fixup functions in the HID subsystem in the Linux kernel before 3.16.2 might allow physically proximate attackers to cause a denial of service (out-of-bounds write) via a crafted device that provides a small report descriptor, related to (1) drivers/hid/hid-cherry.c, (2) drivers/hid/hid-kye.c, (3) drivers/hid/hid-lg.c, (4) drivers/hid/hid-monterey.c, (5) drivers/hid/hid-petalynx.c, and (6) drivers/hid/hid-sunplus.c.
Affected Systems
- ubuntu•linux
< 3.13.0-37.64
- ubuntu•linux-azure
all
- ubuntu•linux-azure-6.11
all
- ubuntu•linux-azure-fde
all
- ubuntu•linux-azure-fde-5.15
all
- ubuntu•linux-gcp
all
- ubuntu•linux-gcp-6.11
all
- ubuntu•linux-gke
all
- ubuntu•linux-gkeop
all
- ubuntu•linux-hwe
all
- ubuntu•linux-hwe-6.11
all
- ubuntu•linux-hwe-edge
all
- ubuntu•linux-intel-iot-realtime
all
- ubuntu•linux-lowlatency-hwe-6.11
all
- ubuntu•linux-raspi-realtime
all
- ubuntu•linux-raspi2
all
- ubuntu•linux-realtime
all | all
- ubuntu•linux-riscv
all | all | all
References (10)
- https://ubuntu.com/security/CVE-2014-3184
- https://code.google.com/p/google-security-research/issues/detail?id=91
- http://www.openwall.com/lists/oss-security/2014/09/11
- https://ubuntu.com/security/notices/USN-2374-1
- https://ubuntu.com/security/notices/USN-2375-1
- https://ubuntu.com/security/notices/USN-2376-1
- https://ubuntu.com/security/notices/USN-2377-1
- https://ubuntu.com/security/notices/USN-2378-1
- https://ubuntu.com/security/notices/USN-2379-1
- https://www.cve.org/CVERecord?id=CVE-2014-3184