CVE-2013-2899: drivers/hid/hid-picolcd_core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3....

Security readout for executives and security teams

This is a Linux kernel denial-of-service flaw in an optional HID driver for PicoLCD devices. A person with physical access could connect a malicious device and crash the system kernel. Business urgency is highest for systems where untrusted USB or HID devices can be attached. Exposure appears limited to Linux systems with CONFIG_HID_PICOLCD enabled and physical proximity to attach a crafted HID device. Internet-facing exposure is not indicated by the supplied sources. Distro backports may change whether an older version string is actually vulnerable. Treat this as a targeted physical-access availability risk, not a broad remote compromise. Patch during normal kernel maintenance unless affected systems are exposed to public or shared-device access, where prioritization should increase. Mitigation focus: Apply vendor kernel updates referenced by Ubuntu, SUSE, or your Linux distribution.; Prioritize systems allowing untrusted physical USB or HID device access.; Check vendor guidance before disabling or removing PicoLCD/HID support..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.