AndroidVulnerabilities.org

CVE-2016-3951

(json)

• CVE numbers: CVE-2016-3951 [Bulletin-CVE-2016-3951]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in kernel USB driver
• Details: Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly have unspecified other impact by inserting a USB device with an invalid USB descriptor. [NIST-CVE-2016-3951]
• Discovered by: on: Unknown
• Reported on: 2016-09-01 [Bulletin-CVE-2016-3951]
• Fixed on: 2016-03-07 [Upstream kernel]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2016-3951]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29