CVE-2013-1860: Heap-based buffer overflow in the wdm_in_callback function in drivers/usb/class/cdc-wdm.c in the Linux kern...

Security readout for executives and security teams

This is an old Linux kernel USB driver flaw. A malicious USB device that presents as a cdc-wdm device could crash a vulnerable system and may allow code execution. The attacker needs physical proximity, so urgency is highest for shared workstations, kiosks, labs, and systems exposed to untrusted USB devices. Exposure is likely limited to Linux systems running vulnerable kernels or unfixed vendor backports with accessible USB ports. Systems without untrusted physical USB access have lower practical risk. The source bundle does not identify specific affected distribution versions beyond advisory references. Handle through normal kernel patch governance, with accelerated attention for physically exposed endpoints. This is not marked as actively exploited in the provided sources, but kernel-level crash or possible code execution makes unmanaged USB exposure the main business concern. Mitigation focus: Update affected Linux kernels using vendor-supported security packages.; Confirm the upstream fix or equivalent vendor backport is present.; Prioritize systems with public, shared, or unmanaged USB access..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.