UBUNTU-CVE-2016-3689
The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (system crash) via a USB device without both a master and a slave interface.
02 / AFFECTED SOFTWARE
Affected packages
88 explicit affected versions
42 explicit affected versions
24 explicit affected versions
11 explicit affected versions
5 explicit affected versions
24 explicit affected versions
6 explicit affected versions
1 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (system crash) via a USB device without both a master and a slave interface.
05 / REFERENCES
Further evidence
- https://bugzilla.novell.com/show_bug.cgi?id=971628
- https://bugzilla.redhat.com/show_bug.cgi?id=1320060
- https://ubuntu.com/security/CVE-2016-3689
- https://ubuntu.com/security/notices/USN-2965-1
- https://ubuntu.com/security/notices/USN-2965-2
- https://ubuntu.com/security/notices/USN-2965-3
- https://ubuntu.com/security/notices/USN-2965-4
- https://ubuntu.com/security/notices/USN-2968-1
- https://ubuntu.com/security/notices/USN-2968-2
- https://ubuntu.com/security/notices/USN-2970-1
- https://ubuntu.com/security/notices/USN-2971-1
- https://ubuntu.com/security/notices/USN-2971-2
- https://ubuntu.com/security/notices/USN-2971-3
- https://ubuntu.com/security/notices/USN-3000-1
- https://www.cve.org/CVERecord?id=CVE-2016-3689