CVE-2015-5257: Null Pointer Dereference
A vulnerability in WhiteHEAT USB Serial Driver in "whiteheatattach" function in drivers/usb/serial/whiteheat.c was found. In the driver, the “COMMANDPORT” variable is hard coded and is set to “4” (5th element). The driver assumes that the number of ports will always be 5 and takes the port number 5 as the command port. But using a specially made USB device in which the number of ports is set to a number less than 5 (e.g. 3), it triggers kernel NULL pointer dereference causing the system to freeze.
Disclosure post (including crash report logs):
http://seclists.org/oss-sec/2015/q3/629
Statement:
This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6, 7 and MRG-2.
This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.
Other sources
drivers/usb/serial/whiteheat.c in the Linux kernel before 4.2.4 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted USB device. NOTE: this ID was incorrectly used for an Apache Cordova issue that has the correct ID of CVE-2015-8320.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this Linux kernel vulnerability?
The vulnerability ID for this Linux kernel vulnerability is CVE-2015-5257.
What is the severity level of vulnerability CVE-2015-5257?
The severity level of vulnerability CVE-2015-5257 is low.
How does vulnerability CVE-2015-5257 affect the Linux kernel?
Vulnerability CVE-2015-5257 allows physically proximate attackers to cause a denial of service or potentially have other unspecified impact via a crafted USB device.
Which versions of the Linux kernel are affected by vulnerability CVE-2015-5257?
Vulnerability CVE-2015-5257 affects the Linux kernel before version 4.2.4.
How can I fix vulnerability CVE-2015-5257 in my Linux kernel?
To fix vulnerability CVE-2015-5257, update your Linux kernel to version 4.2.4 or later.