Multiple heap-based buffer overflows in the hiddev_ioctl_usage function in drivers/hid/usbhid/hiddev.c in the Linux kernel through 4.6.3 allow local users to cause a denial of service or possibly have unspecified other impact via a crafted (1) HIDIOCGUSAGES or (2) HIDIOCSUSAGES ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-debugUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-firmwareUpgrade kernel-abi-whitelistsUpgrade kernel-doc | Oct 21, 2016 | Jun 27, 2016 |
| Debian | — | Upgrade linux | Jul 4, 2016 | Jun 27, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Oct 22, 2016 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 7, 2016 | Jun 25, 2016 |
| Redhat_linux | — | Upgrade kernel-kdump-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-docUpgrade kernel-rt-docNo solution existsUpgrade kernel-abi-whitelistsUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-rt-traceUpgrade kernel-rt-debug-debuginfoUpgrade kernel-bootwrapperUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rtUpgrade kernel-debuginfo-common-ppc64Upgrade python-perfUpgrade kernel-rt-trace-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-trace-develUpgrade kernel-firmwareUpgrade perfUpgrade perf-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-kdump-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-i686Upgrade kernel-debugUpgrade kernel-kdumpUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfo | Oct 21, 2016 | Jun 27, 2016 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade cluster-network-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-ec2Upgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-default | Jul 26, 2016 | Jun 27, 2016 |
| Ubuntu | — | Upgrade linux-image-3.2.0-109-genericUpgrade linux-image-3.2.0-109-powerpc64-smpUpgrade linux-image-3.13.0-95-powerpc-smpUpgrade linux-image-4.4.0-36-powerpc64-smpUpgrade linux-image-4.4.0-1024-snapdragonUpgrade linux-image-3.13.0-95-generic-lpaeUpgrade linux-image-3.2.0-109-powerpc-smpUpgrade linux-image-3.2.0-109-generic-paeUpgrade linux-image-3.2.0-109-virtualUpgrade linux-image-4.4.0-1021-raspi2Upgrade linux-image-3.2.0-109-omapUpgrade linux-image-4.4.0-36-genericUpgrade linux-image-3.13.0-95-powerpc-e500Upgrade linux-image-4.4.0-36-powerpc64-embUpgrade linux-image-3.13.0-95-genericUpgrade linux-image-4.4.0-36-powerpc-smpUpgrade linux-image-3.13.0-95-powerpc64-smpUpgrade linux-image-3.13.0-95-powerpc-e500mcUpgrade linux-image-3.2.0-1487-omap4Upgrade linux-image-4.4.0-36-generic-lpaeUpgrade linux-image-3.13.0-95-lowlatencyUpgrade linux-image-4.4.0-36-powerpc-e500mcUpgrade linux-image-4.4.0-36-lowlatencyUpgrade linux-image-3.2.0-109-highbankUpgrade linux-image-3.13.0-95-powerpc64-emb | Aug 29, 2016 | Jun 27, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 27, 2016 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub