The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate attackers to cause a denial of service (invalid memory access and system crash) or possibly have unspecified other impact by unplugging a USB hub device.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 4, 2016 | Mar 3, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel | Dec 4, 2019 | Apr 27, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel | Dec 18, 2019 | Apr 27, 2016 |
| Oracle_linux | — | Upgrade kernel-uek-docUpgrade dtrace-modulesUpgrade kernel-uek-debugUpgrade kernel-uekUpgrade kernel-uek-develUpgrade kernel-uek-debug-develUpgrade kernel-uek-firmware | Jul 1, 2017 | Apr 27, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 23, 2016 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade kernel-ec2-develUpgrade kernel-ec2 | Apr 13, 2016 | Apr 12, 2016 |
| Ubuntu | — | Upgrade linux-lts-utopicUpgrade linux-lts-wilyUpgrade linux-ti-omap4Upgrade linux-armadaxpUpgrade linux-lts-trustyUpgrade linux-raspi2Upgrade linux-lts-vividUpgrade linux | Nov 19, 2024 | Apr 27, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub