CVE-2015-8816

6.8MEDIUM

Key Information

Vendor: Novell
Status: Suse Linux Enterprise Server; Suse Linux Enterprise Debuginfo; Suse Linux Enterprise Live Patching; Suse Linux Enterprise Real Time Extension
Vendor: CVE Published:; 27 April 2016

Summary

The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate attackers to cause a denial of service (invalid memory access and system crash) or possibly have unspecified other impact by unplugging a USB hub device.

CVSS V3.1

Score:

6.8

Severity:

MEDIUM

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Physical

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Apr 27, 2016
Vulnerability Reserved.
Feb 23, 2016

Collectors

NVD DatabaseMitre Database