The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate attackers to cause a denial of service (invalid memory access and system crash) or possibly have unspecified other impact by unplugging a USB hub device.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 4, 2016 | Mar 3, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade python-perf | Dec 4, 2019 | Apr 27, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Dec 18, 2019 | Apr 27, 2016 |
| Oracle_linux | — | Upgrade kernel-uek-debugUpgrade kernel-uek-develUpgrade kernel-uekUpgrade kernel-uek-debug-develUpgrade kernel-uek-firmwareUpgrade dtrace-modulesUpgrade kernel-uek-doc | Jul 1, 2017 | Apr 27, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 23, 2016 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ec2Upgrade kernel-ec2-devel | Apr 13, 2016 | Apr 12, 2016 |
| Ubuntu | — | Upgrade linux-lts-utopicUpgrade linux-lts-wilyUpgrade linux-ti-omap4Upgrade linux-raspi2Upgrade linux-armadaxpUpgrade linuxUpgrade linux-lts-trustyUpgrade linux-lts-vivid | Nov 19, 2024 | Apr 27, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub