CVSS 3.0
4.6 mediumCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2016-2186
The powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:ubuntu_linux
- linux:linux_kernel
- novell:suse_linux_enterprise_debuginfo
- novell:suse_linux_enterprise_desktop
- novell:suse_linux_enterprise_live_patching
- novell:suse_linux_enterprise_module_for_public_cloud
- novell:suse_linux_enterprise_real_time_extension
- novell:suse_linux_enterprise_server
- novell:suse_linux_enterprise_software_development_kit
- novell:suse_linux_enterprise_workstation_extension
References
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9c6ba456711687b794dcf285856fc14e2c76074f
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html