The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate attackers to cause a denial of service (invalid memory access and system crash) or possibly have unspecified other impact by unplugging a USB hub device.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 4, 2016 | Mar 3, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debug-devel | Dec 4, 2019 | Apr 27, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Dec 18, 2019 | Apr 27, 2016 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel-uek-develUpgrade kernel-uek-debug-develUpgrade kernel-uek-debugUpgrade kernel-uek-firmwareUpgrade dtrace-modulesUpgrade kernel-uek-doc | Jul 1, 2017 | Apr 27, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 23, 2016 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2Upgrade kernel-ec2-devel | Apr 13, 2016 | Apr 12, 2016 |
| Ubuntu | — | Upgrade linux-lts-utopicUpgrade linux-lts-wilyUpgrade linux-armadaxpUpgrade linuxUpgrade linux-lts-vividUpgrade linux-ti-omap4Upgrade linux-lts-trustyUpgrade linux-raspi2 | Nov 19, 2024 | Apr 27, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub