UBUNTU-CVE-2016-3136
The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted USB device without two interrupt-in endpoint descriptors.
02 / AFFECTED SOFTWARE
Affected packages
88 explicit affected versions
42 explicit affected versions
24 explicit affected versions
11 explicit affected versions
5 explicit affected versions
24 explicit affected versions
6 explicit affected versions
1 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted USB device without two interrupt-in endpoint descriptors.
05 / REFERENCES
Further evidence
- http://seclists.org/bugtraq/2016/Mar/57
- http://www.openwall.com/lists/oss-security/2016/03/14/2
- https://bugzilla.redhat.com/show_bug.cgi?id=1283370
- https://ubuntu.com/security/CVE-2016-3136
- https://ubuntu.com/security/notices/USN-2965-1
- https://ubuntu.com/security/notices/USN-2965-2
- https://ubuntu.com/security/notices/USN-2965-3
- https://ubuntu.com/security/notices/USN-2965-4
- https://ubuntu.com/security/notices/USN-2968-1
- https://ubuntu.com/security/notices/USN-2968-2
- https://ubuntu.com/security/notices/USN-2970-1
- https://ubuntu.com/security/notices/USN-2971-1
- https://ubuntu.com/security/notices/USN-2971-2
- https://ubuntu.com/security/notices/USN-2971-3
- https://ubuntu.com/security/notices/USN-2996-1
- https://ubuntu.com/security/notices/USN-2997-1
- https://ubuntu.com/security/notices/USN-3000-1
- https://www.cve.org/CVERecord?id=CVE-2016-3136