CVE-2016-2782
PoC —CVSS 3.1
4.6 medium
EPSS
2%p75
Published
()
Modified
Description
The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by inserting a USB device that lacks a (1) bulk-in or (2) interrupt-in endpoint.
- Vendors
- linuxsuse
- Products
- linux kernel, linux enterprise debuginfo, linux enterprise module for public cloud, linux enterprise desktop, linux enterprise real time extension, linux enterprise server, linux enterprise software development kit, linux enterprise workstation extension
- Weakness
- CWE-476
- Vector
- CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
In the news0 stories
No ingested article mentions this CVE yet.