Security readout for executives and security teams
A flaw in the Linux Sony HID driver could let someone with physical access connect a crafted device and crash or destabilize an affected system. This is not described as remotely exploitable. Business urgency depends mainly on whether untrusted people can attach peripherals to affected Linux machines. Exposure is limited to systems running Linux kernel through 3.11 with CONFIG_HID_SONY enabled and accepting physically proximate crafted devices. Likely concern areas include workstations, kiosks, labs, and appliances where untrusted users can attach peripherals. Sources do not name specific distributions or packages. Prioritize systems where untrusted users can physically connect devices. For controlled servers with restricted physical access, urgency is lower. For public-facing workstations or appliances, handle in the next kernel maintenance cycle or sooner if vendor guidance flags impact. Mitigation focus: Identify Linux systems running kernel versions through 3.11.; Check whether CONFIG_HID_SONY is enabled on those systems.; Apply vendor kernel updates or distribution guidance where available..
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2013-2890 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.