CVE-2016-2185: Null Pointer Dereference
A flaw was found in in the Linux kernel's USB device management code which could cause a kernel panic when a device which required atiremote2 kernel module. The kernel would panic causing null pointer dereference attempting to access a non existent interface descriptor. The atiremote2 driver assumes that there will be at least two interface-descriptors with associated endpoint-descriptors.
Product bugs:
https://bugzilla.redhat.com/showbug.cgi?id=1283362 https://bugzilla.redhat.com/showbug.cgi?id=1283363
Public via:
http://seclists.org/bugtraq/2016/Mar/90
Red Hat assigned CVE-2016-2185 to this issue.
Upstream patch:
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=950336ba3e4a1ffd2ca60d29f6ef386dd2c7351d
Other sources
The atiremote2probe function in drivers/input/misc/atiremote2.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-2185?
CVE-2016-2185 is classified as a medium severity vulnerability due to its potential to cause kernel panic.
How do I fix CVE-2016-2185?
To fix CVE-2016-2185, upgrade to the recommended versions of the Linux kernel or apply the patches provided by your distribution.
Which Linux versions are affected by CVE-2016-2185?
CVE-2016-2185 affects Ubuntu 12.04, Linux kernels up to version 4.5.0, and multiple versions of SUSE Linux Enterprise Software Development Kit and Desktop.
What impact does CVE-2016-2185 have on my system?
CVE-2016-2185 can lead to a kernel panic when a device requiring the ati_remote2 kernel module is connected, causing system instability.
Is CVE-2016-2185 actively exploited?
There have been no widely reported active exploits specifically targeting CVE-2016-2185, but it is advisable to patch it promptly to avoid potential risks.