CVE-2014-3182

What it actually does

Array index error in logi_dj_raw_event allows physically proximate attackers to execute arbitrary code or cause denial of service via invalid kfree from a crafted device providing malformed REPORT_TYPE_NOTIF_DEVICE_UNPAIRED value.

Why it matters to the business

Older Ubuntu systems running affected webkitgtk packages face risk of local compromise or disruption from physical device attacks, though low exploit likelihood and age reduce immediate operational urgency across the ecosystem.

How an attack unfolds

An attacker with physical access connects a specially crafted USB HID device that sends a malformed REPORT_TYPE_NOTIF_DEVICE_UNPAIRED report, triggering the array index error and resulting in arbitrary code execution or invalid memory deallocation.

How to fix it

Upgrade webkitgtk on Ubuntu 14.04 LTS to 2.4.8-1ubuntu1~ubuntu14.04.1 and on Ubuntu 16.04 LTS to 2.4.9-2ubuntu2; apply kernel updates addressing the underlying hid-logitech-dj.c flaw where applicable.

How to confirm the fix worked

Verify package versions match the listed fixed releases using dpkg or apt, and confirm absence of vulnerable hid-logitech-dj.c code paths in running kernel.

Typical attack path

1. Obtain physical access to the target system
2. Connect a crafted Logitech DJ device
3. Send malformed REPORT_TYPE_NOTIF_DEVICE_UNPAIRED report
4. Trigger array index error leading to code execution or kfree failure

How to detect it

Review system logs for unexpected HID device events or kfree errors around device connection times; inspect kernel crash dumps for references to hid-logitech-dj.c.

What your security team should do

• Prioritize patching webkitgtk packages on all listed Ubuntu releases
• Disable unnecessary HID device support if physical access cannot be controlled
• Monitor for new EPSS increases despite current low score and static trend