Denial of Service Vulnerability in Linux Kernel Affecting Wacom Drivers
CVE-2016-3139
4.6MEDIUM
Key Information:
- Vendor
Novell
- Status
- Vendor
- CVE Published:
- 27 April 2016
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2016-3139?
The wacom_probe function in the Linux kernel prior to version 3.17 is susceptible to a denial of service condition. Attackers with physical access can exploit this vulnerability by providing a crafted endpoints value in a USB device descriptor, resulting in a NULL pointer dereference and subsequent system crash. This threat underscores the importance of securing system access and ensuring that USB inputs are validated to prevent exploitation.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.