CVE-2016-3951
- EPSS 0.02%
- Published 02.05.2016 10:59:41
- Last modified 12.04.2025 10:46:40
Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly have unspecified other impact by inserting a USB device with an invali...
CVE-2016-3689
- EPSS 0.06%
- Published 02.05.2016 10:59:40
- Last modified 12.04.2025 10:46:40
The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (system crash) via a USB device without both a master and a slave interface.
CVE-2016-3140
- EPSS 0.16%
- Published 02.05.2016 10:59:39
- Last modified 12.04.2025 10:46:40
The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB...
CVE-2016-3138
- EPSS 0.02%
- Published 02.05.2016 10:59:37
- Last modified 12.04.2025 10:46:40
The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB device without both a control and a data e...
CVE-2016-3137
- EPSS 0.02%
- Published 02.05.2016 10:59:36
- Last modified 12.04.2025 10:46:40
drivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB device without both an interrupt-in and an interrupt-out endpoin...
CVE-2016-3136
- EPSS 0.2%
- Published 02.05.2016 10:59:35
- Last modified 12.04.2025 10:46:40
The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted USB device without two i...
CVE-2016-2188
- EPSS 0.25%
- Published 02.05.2016 10:59:32
- Last modified 12.04.2025 10:46:40
The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device...
CVE-2016-2186
- EPSS 0.05%
- Published 02.05.2016 10:59:29
- Last modified 12.04.2025 10:46:40
The powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB devi...
CVE-2016-2185
- EPSS 0.04%
- Published 02.05.2016 10:59:28
- Last modified 12.04.2025 10:46:40
The ati_remote2_probe function in drivers/input/misc/ati_remote2.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB ...
CVE-2016-3672
- EPSS 0.02%
- Published 27.04.2016 17:59:27
- Last modified 12.04.2025 10:46:40
The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier for local users to defeat the intended restrictions on the ADDR_NO_RANDOMIZE flag, a...