Vulnetix
Try Vulnetix Request Demo
CVE-2016-3136 PUBLISHED

The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted USB device without two interrupt-in endpoint descriptors.

EPSS 0.20% · 42.1th percentile

Risk Scores

EPSS Score
0.20%
42.1th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlinux-raspi24.2.0-1014.21, 4.2.0-1013.19, 0
Ubuntu:14.04:LTSlinux-lts-xenial4.4.0-13.29~14.04.1, 0, 4.4.0-21.37~14.04.1
Ubuntu:14.04:LTSlinux-lts-vivid3.19.0-49.55~14.04.1, 3.19.0-47.53~14.04.1, 3.19.0-43.49~14.04.1
Ubuntu:14.04:LTSlinux-lts-utopic3.16.0-29.39~14.04.1, 3.16.0-28.38~14.04.1, 3.16.0-28.37~14.04.1
Ubuntu:16.04:LTSlinux4.3.0-6.17, 0, 4.2.0-16.19
Ubuntu:16.04:LTSlinux-snapdragon0, 4.4.0-1012.12
Ubuntu:14.04:LTSlinux-lts-wily0, 4.2.0-18.22~14.04.1, 4.2.0-19.23~14.04.1
Ubuntu:14.04:LTSlinux3.13.0-41.70, 3.13.0-40.69, 3.13.0-39.66

Timeline

References

Open in Interactive Console →