CVE-2016-2184

—

CVSS 3.0

4.6 medium

EPSS

2%p79

Published

Apr 27, 2016 (Apr 27, 2016)

Modified

Jun 17, 2026

Description

The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference or double free, and system crash) via a crafted endpoints value in a USB device descriptor.

Vendors: linux canonical novell
Products: linux kernel, ubuntu linux, suse linux enterprise software development kit, suse linux enterprise debuginfo, suse linux enterprise desktop, suse linux enterprise live patching, suse linux enterprise module for public cloud, suse linux enterprise real time extension, suse linux enterprise server, suse linux enterprise workstation extension
Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news0 stories

No ingested article mentions this CVE yet.