Back to all categorys

Elevation of privilege vulnerability in kernel USB driver

CVE-2016-3951

(json)

• CVE numbers: CVE-2016-3951 [Bulletin-CVE-2016-3951]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel USB driver
• Details: Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly have unspecified other impact by inserting a USB device with an invalid USB descriptor. [NIST-CVE-2016-3951]
• Discovered by: on: Unknown
• Reported on: 2016-09-01 [Bulletin-CVE-2016-3951]
• Fixed on: 2016-03-07 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3951]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-7912

(json)

• CVE numbers: CVE-2016-7912 [Bulletin-CVE-2016-7912]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel USB driver
• Details: Use-after-free vulnerability in the ffs_user_copy_worker function in drivers/usb/gadget/function/f_fs.c in the Linux kernel before 4.5.3 allows local users to gain privileges by accessing an I/O data structure after a certain callback call. [NIST-CVE-2016-7912]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2016-7912]
• Fixed on: 2016-04-14 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-7912]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29