CVE-2016-3138: Null Pointer Dereference
A flaw was found in the Linux kernel handling when a buggy USB device is attached attempting to use the cdcacm kernel module. This flaw would cause the kernel to panic by a null pointer dereference.
Public via:
http://seclists.org/bugtraq/2016/Mar/54
CVE-ID request and assignment:
http://seclists.org/oss-sec/2016/q1/605
http://seclists.org/oss-sec/2016/q1/622
Upstream patch:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8835ba4a39cf53f705417b3b3a94eb067673f2c9
Other sources
The acmprobe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB device without both a control and a data endpoint descriptor.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3138?
CVE-2016-3138 has a high severity level due to the potential for kernel panic resulting from a null pointer dereference when interacting with specific USB devices.
How do I fix CVE-2016-3138?
To fix CVE-2016-3138, update the Linux kernel to versions 4.5.1 or later, or apply relevant patches provided by your distribution.
Which Linux distributions are affected by CVE-2016-3138?
CVE-2016-3138 affects several distributions including certain versions of the Linux kernel, Ubuntu 12.04, and SUSE Linux Enterprise versions 11 and 12.
What is the impact of CVE-2016-3138?
The impact of CVE-2016-3138 can cause system instability, leading to kernel panics when a problematic USB device is connected.
Are there any workarounds for CVE-2016-3138?
As a workaround for CVE-2016-3138, users should avoid connecting USB devices that may trigger the vulnerability until a fix is applied.