Denial of Service Vulnerability in Linux Kernel USB Driver
CVE-2015-7566
4.6MEDIUM
Key Information:
- Vendor
Novell
- Status
- Vendor
- CVE Published:
- 8 February 2016
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2015-7566?
The clie_5_attach function in the Linux Kernel’s USB serial driver is susceptible to a denial of service condition. This vulnerability arises when a physically proximate attacker connects a specially crafted USB device that lacks a bulk-out endpoint. This can lead to a NULL pointer dereference, potentially crashing the system and causing instability. Immediate remediation is advised to prevent potential exploitation.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.