The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate attackers to cause a denial of service (invalid memory access and system crash) or possibly have unspecified other impact by unplugging a USB hub device.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 4, 2016 | Mar 3, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debugUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-libs | Dec 4, 2019 | Apr 27, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perf | Dec 18, 2019 | Apr 27, 2016 |
| Oracle_linux | — | Upgrade kernel-uek-debug-develUpgrade kernel-uekUpgrade kernel-uek-develUpgrade kernel-uek-firmwareUpgrade kernel-uek-debugUpgrade kernel-uek-docUpgrade dtrace-modules | Jul 1, 2017 | Apr 27, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 23, 2016 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-ec2 | Apr 13, 2016 | Apr 12, 2016 |
| Ubuntu | — | Upgrade linux-armadaxpUpgrade linuxUpgrade linux-raspi2Upgrade linux-lts-vividUpgrade linux-ti-omap4Upgrade linux-lts-trustyUpgrade linux-lts-wilyUpgrade linux-lts-utopic | Nov 19, 2024 | Apr 27, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub