Multiple buffer overflows in the command_port_read_callback function in drivers/usb/serial/whiteheat.c in the Whiteheat USB Serial Driver in the Linux kernel before 3.16.2 allow physically proximate attackers to execute arbitrary code or cause a denial of service (memory corruption and system crash) via a crafted device that provides a large amount of (1) EHCI or (2) XHCI data associated with a bulk response.
CVSS Details
- CVSS 3.1 Base Score: 6.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-abi-whitelistsUpgrade kernel-tools-libs-develUpgrade kernel-firmwareUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debugUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Dec 1, 2016 | Sep 28, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 28, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 31, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Sep 28, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 24, 2014 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2 | Dec 18, 2015 | Sep 28, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-67-preemptUpgrade linux-image-3.13.0-37-genericUpgrade linux-image-2.6.32-67-serverUpgrade linux-image-3.2.0-70-omapUpgrade linux-image-3.2.0-70-generic-paeUpgrade linux-image-2.6.32-67-sparc64-smpUpgrade linux-image-3.2.0-1455-omap4Upgrade linux-image-2.6.32-67-powerpcUpgrade linux-image-3.2.0-70-virtualUpgrade linux-image-2.6.32-67-powerpc64-smpUpgrade linux-image-2.6.32-67-powerpc-smpUpgrade linux-image-2.6.32-371-ec2Upgrade linux-image-2.6.32-67-386Upgrade linux-image-3.13.0-37-powerpc64-smpUpgrade linux-image-3.2.0-70-powerpc-smpUpgrade linux-image-2.6.32-67-ia64Upgrade linux-image-3.13.0-37-powerpc-smpUpgrade linux-image-3.2.0-70-powerpc64-smpUpgrade linux-image-2.6.32-67-generic-paeUpgrade linux-image-2.6.32-67-genericUpgrade linux-image-2.6.32-67-virtualUpgrade linux-image-3.2.0-70-genericUpgrade linux-image-3.13.0-37-powerpc-e500Upgrade linux-image-3.2.0-70-highbankUpgrade linux-image-3.13.0-37-powerpc-e500mcUpgrade linux-image-3.13.0-37-generic-lpaeUpgrade linux-image-2.6.32-67-sparc64Upgrade linux-image-2.6.32-67-lpiaUpgrade linux-image-3.13.0-37-powerpc64-embUpgrade linux-image-2.6.32-67-versatileUpgrade linux-image-3.13.0-37-lowlatency | Nov 8, 2024 | Sep 28, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub