CVE-2016-2782 The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) or....
MediumCVSS 4.6
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by inserting a USB device that lacks a (1) bulk-in or (2) interrupt-in endpoint.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 4.4.2-1 | 4.4.2-1 |
| debian/linux(Debian:13) | < 4.4.2-1 | 4.4.2-1 |
| debian/linux(Debian:14) | < 4.4.2-1 | 4.4.2-1 |
| Linux kernel | < 4.5.0 | 4.5.0 |
| Linux kernel | = 4.5.0-rc1 | No fix listed |
| SUSE linux enterprise debuginfo | = 11-sp2 | No fix listed |
| SUSE linux enterprise debuginfo | = 11-sp4 | No fix listed |
| SUSE linux enterprise module for public cloud | = 12 | No fix listed |
| SUSE linux enterprise desktop | = 12 | No fix listed |
| SUSE linux enterprise desktop | = 12-sp1 | No fix listed |
| SUSE linux enterprise real time extension | = 11-sp4 | No fix listed |
| SUSE linux enterprise real time extension | = 12-sp1 | No fix listed |
| SUSE linux enterprise server | = 11-sp2 | No fix listed |
| SUSE linux enterprise server | = 11-sp4 | No fix listed |
| SUSE linux enterprise server | = 12 | No fix listed |
| SUSE linux enterprise server | = 12-sp1 | No fix listed |
| SUSE linux enterprise software development kit | = 11-sp4 | No fix listed |
| SUSE linux enterprise software development kit | = 12 | No fix listed |
| SUSE linux enterprise software development kit | = 12-sp1 | No fix listed |
| SUSE linux enterprise workstation extension | = 12 | No fix listed |
| SUSE linux enterprise workstation extension | = 12-sp1 | No fix listed |
References
- Debian Security Tracker CVE-2016-2782 vendor-advisory
- Ubuntu CVE tracker vendor-advisory
- USN-2932-1 vendor-advisory
- USN-2930-1 vendor-advisory
- USN-2930-2 vendor-advisory
- USN-2929-2 vendor-advisory
- USN-2929-1 vendor-advisory
- USN-2930-3 vendor-advisory
- USN-2948-1 vendor-advisory
- USN-2967-2 vendor-advisory
- USN-2967-1 vendor-advisory
- www.cve.org
- git.kernel.org issue-tracking patch vendor-advisory
- SUSE-SU-2016:1019 third-party-advisory vendor-advisory
- SUSE-SU-2016:1672 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:1690 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:1707 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:1764 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:2074 mailing-list third-party-advisory vendor-advisory
- [oss-security] 20160228 Re: CVE request -- linux kernel: visor: crash on invalid USB device descriptors in treo_attach() in visor driver mailing-list third-party-advisory
- USN-2929-1 third-party-advisory vendor-advisory
- USN-2929-2 third-party-advisory vendor-advisory
- USN-2930-1 third-party-advisory vendor-advisory
- USN-2930-2 third-party-advisory vendor-advisory
- USN-2930-3 third-party-advisory vendor-advisory
- USN-2932-1 third-party-advisory vendor-advisory
- USN-2948-1 third-party-advisory vendor-advisory
- USN-2948-2 third-party-advisory vendor-advisory
- USN-2967-1 third-party-advisory vendor-advisory
- USN-2967-2 third-party-advisory vendor-advisory
- bugzilla.redhat.com exploit issue-tracking third-party-advisory
- github.com issue-tracking patch third-party-advisory
- 39539 exploit third-party-advisory vdb-entry