A flaw was found in in the Linux kernel's USB device management code which could cause a crash when a device which required gtco module. The kernel would panic causing null pointer dereference attempting to access invalid USB device descriptors.

Product bug:

https://bugzilla.redhat.com/showbug.cgi?id=1283385

Intended to be public via:

http://seclists.org/bugtraq/2016/Mar/86

Public via:

https://bugzilla.redhat.com/showbug.cgi?id=1283385

Proposed upstream patch (linux-usb@ and linux-input@ lists):

http://www.spinics.net/lists/linux-usb/msg137950.html http://www.spinics.net/lists/linux-input/msg43786.html

Upstream patch:

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=162f98dea487206d9ab79fc12ed64700667a894d