Published: 02/05/2016 Updated: 07/11/2023

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 4.6 | Impact Score: 3.6 | Exploitability Score: 0.9

VMScore: 495

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel prior to 4.5.1 allows physically proximate malicious users to cause a denial of service (NULL pointer dereference and system crash) via a crafted USB device without two interrupt-in endpoint descriptors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
novell suse linux enterprise module for public cloud 12.0
novell suse linux enterprise server 12.0
novell suse linux enterprise live patching 12.0
novell suse linux enterprise desktop 12.0
novell suse linux enterprise real time extension 12.0
novell suse linux enterprise workstation extension 12.0
novell suse linux enterprise software development kit 12.0
canonical ubuntu linux 12.04
canonical ubuntu linux 14.04

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2015-7515, CVE-2016-2184, CVE-2016-2185, CVE-2016-2186, CVE-2016-2187, CVE-2016-3136, CVE-2016-3137, CVE-2016-3138, CVE-2016-3140 Ralf Spenneberg of OpenSource Sec ...

The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232c in the Linux kernel before 451 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted USB device without two interrupt-in endpoint descriptors ...

Several security issues were fixed in the kernel ...

OS-S Security Advisory 2016-08 Linux mct_u232 Nullpointer Dereference Date: March 4th, 2016 Authors: Sergej Schumilo, Hendrik Schwartke, Ralf Spenneberg CVE: not yet assigned CVSS: 49 (AV:L/AC:L/Au:N/C:N/I:N/A:C) Title: Local RedHat Enterprise Linux DoS â?? RHEL 71 Kernel crashes on invalid USB device descriptors (mct_u232_m8 driver) Severity: ...

NVD-CWE-Other http://www.ubuntu.com/usn/USN-2971-2 http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html http://www.ubuntu.com/usn/USN-2970-1 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4e9a0b05257f29cf4b75f3209243ed71614d062e https://bugzilla.redhat.com/show_bug.cgi?id=1283370 http://www.ubuntu.com/usn/USN-2968-1 http://www.openwall.com/lists/oss-security/2016/03/14/2 https://github.com/torvalds/linux/commit/4e9a0b05257f29cf4b75f3209243ed71614d062e http://www.ubuntu.com/usn/USN-2971-3 http://www.ubuntu.com/usn/USN-2997-1 http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html http://www.ubuntu.com/usn/USN-3000-1 http://www.debian.org/security/2016/dsa-3607 https://www.exploit-db.com/exploits/39541/http://www.ubuntu.com/usn/USN-2971-1 https://bugzilla.redhat.com/show_bug.cgi?id=1317007 http://www.ubuntu.com/usn/USN-2996-1 http://www.ubuntu.com/usn/USN-2968-2 http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html http://www.securityfocus.com/bid/84299 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1 https://nvd.nist.gov https://www.debian.org/security/./dsa-3607 https://www.exploit-db.com/exploits/39541/https://usn.ubuntu.com/2970-1/

CVE-2016-3136

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect