CVE-2016-5400: Buffer Overflow
A flaw was found in the linux kernel's implementation of the airspy USB device driver in which a leak was found when a subdev or SDR are plugged into the host.
An attacker can create an targeted USB device which can emulate 64 of these devices. Then by emulating an additional device which continuously connects and disconnects, each connection attempt will leak memory which can not be recovered.
Upstream patch: https://git.linuxtv.org/mediatree.git/commit/?id=eca2d34b9d2ce70165a50510659838e28ca22742
Other sources
Memory leak in the airspyprobe function in drivers/media/usb/airspy/airspy.c in the airspy USB driver in the Linux kernel before 4.7 allows local users to cause a denial of service (memory consumption) via a crafted USB device that emulates many VFLTYPESDR or VFLTYPESUBDEV devices and performs many connect and disconnect operations.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2016-5400?
CVE-2016-5400 is a vulnerability in the airspy USB driver in the Linux kernel before version 4.7 that allows local users to cause a denial of service through a crafted USB device.
How severe is CVE-2016-5400?
CVE-2016-5400 has a severity value of 1, indicating a low severity.
Which software versions are affected by CVE-2016-5400?
The vulnerability affects Linux kernel versions before 4.7.
How can I fix CVE-2016-5400?
To fix CVE-2016-5400, update to Linux kernel version 4.7 or later.
Where can I find more information about CVE-2016-5400?
You can find more information about CVE-2016-5400 at the following references: [1] [2] [3].