NetSight
IP …
medium4.6Public exploit code

CVE-2016-2782

The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (NULL …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by inserting a USB device that lacks a (1) bulk-in or (2) interrupt-in endpoint.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.5.0
Version 4.5.0
SuseLinux Enterprise Debuginfo
Version 11
SuseLinux Enterprise Module For Public Cloud
Version 12
SuseLinux Enterprise Desktop
Version 12
SuseLinux Enterprise Real Time Extension
Versions 11, 12
SuseLinux Enterprise Server
Versions 11, 12
SuseLinux Enterprise Software Development Kit
Versions 11, 12
SuseLinux Enterprise Workstation Extension
Version 12

Weakness classification

CWE-476

References