CVE-2015-8816: High severity suse linux enterprise software development kit vulnerability
Quickly plugging in and unplugging a USB hub can lead to a null pointer dereference in kernel (local denial of service) or the USB port to which the hub is connected becomes unusable, for kernel versions 2.6.32 < 4.4. The issue occurs when the USB hub gets disconnected before or while the routine for USB hub activation is running - hubactivate() function.
Upstream patch:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e50293ef9775c5
External references:
http://www.spinics.net/lists/linux-usb/msg132311.html
CVE-ID request and assignment:
http://seclists.org/oss-sec/2016/q1/404
http://seclists.org/oss-sec/2016/q1/413
Other sources
The hubactivate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate attackers to cause a denial of service (invalid memory access and system crash) or possibly have unspecified other impact by unplugging a USB hub device.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8816?
CVE-2015-8816 has been classified as a local denial of service vulnerability affecting specific kernel versions.
How do I fix CVE-2015-8816?
To fix CVE-2015-8816, update your system to a patched kernel version that is not affected by this vulnerability.
Which systems are affected by CVE-2015-8816?
CVE-2015-8816 affects various versions of the Linux kernel, specifically from 2.6.32 to 4.4, as well as certain SUSE Linux distributions.
What happens if I am affected by CVE-2015-8816?
If affected by CVE-2015-8816, quickly plugging and unplugging a USB hub can lead to system instability or an unusable USB port.
Is there a workaround for CVE-2015-8816?
While the best solution is to update the kernel, avoiding rapid plugging and unplugging of USB hubs can serve as a temporary workaround.