CVE-2016-2188

4.6MEDIUM

Key Information

Vendor: Novell
Status: Suse Linux Enterprise Module For Public Cloud; Suse Linux Enterprise Server; Suse Linux Enterprise Live Patching; Suse Linux Enterprise Real Time Extension
Vendor: CVE Published:; 2 May 2016

Summary

The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.

CVSS V3.1

Score:

4.6

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

High

Attack Vector:

Physical

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
May 2, 2016
Vulnerability Reserved.
Jan 29, 2016

Collectors

NVD DatabaseMitre Database