CVE-2011-0640 - CVE House
Back to Database
Status published Medium CVE-2011-0640

The default configuration of udev on Linux does not warn...

Vulnerability Description

The default configuration of udev on Linux does not warn the user before enabling additional Human Interface Device (HID) functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware on a smartphone that the user connected to the computer.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-0640

Credits & Attribution

No credits recorded in the NVD database.

References

More from udev project

View All →
CVE-2009-1186
Buffer overflow in the util_path_encode function in udev/lib/libudev-util.c in udev...
Low 2.1
CVE-2009-1185
udev before 1.4.1 does not verify whether a NETLINK message...
High 7.2

Affected Vendor

udev project

View all reports →

Affected Software

udev
Vulnerable Versions:
Unknown

Timeline

Official Publish: January 25th, 2011
Last Modified: September 16th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.