CVE-2016-3140

MEDIUM · 4.6 CVSS Gepubliceerd: 02-05-2016

Beschrijving

The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.

Vendors

Canonical Linux Novell

Affected products

Ubuntu Linux Linux Kernel Suse Linux Enterprise Software Development Kit Suse Linux Enterprise Debuginfo Suse Linux Enterprise Desktop Suse Linux Enterprise Live Patching Suse Linux Enterprise Module For Public Cloud Suse Linux Enterprise Real Time Extension Suse Linux Enterprise Server Suse Linux Enterprise Workstation Extension

Beschrijving

Vendors

Affected products

References