The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted USBDEVFS_CONNECTINFO ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 28, 2016 | May 23, 2016 |
| Oracle_linux | — | Upgrade kernel-uek-docUpgrade dtrace-modulesUpgrade kernel-uek-develUpgrade kernel-uek-debugUpgrade kernel-uekUpgrade kernel-uek-debug-develUpgrade kernel-uek-firmware | Feb 7, 2017 | May 23, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 3, 2016 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-defaultUpgrade cluster-network-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2 | Jun 21, 2016 | May 23, 2016 |
| Ubuntu | — | Upgrade linux-image-3.16.0-76-powerpc-smpUpgrade linux-image-3.19.0-64-lowlatencyUpgrade linux-image-3.13.0-91-powerpc64-embUpgrade linux-image-4.2.0-41-genericUpgrade linux-image-4.4.0-28-powerpc-e500mcUpgrade linux-image-3.13.0-91-powerpc-e500mcUpgrade linux-image-3.16.0-76-powerpc64-embUpgrade linux-image-3.19.0-64-genericUpgrade linux-image-4.2.0-41-powerpc-smpUpgrade linux-image-3.13.0-91-powerpc-e500Upgrade linux-image-3.13.0-91-generic-lpaeUpgrade linux-image-4.4.0-28-generic-lpaeUpgrade linux-image-3.19.0-64-powerpc-e500mcUpgrade linux-image-3.13.0-91-powerpc-smpUpgrade linux-image-4.2.0-41-powerpc64-smpUpgrade linux-image-3.16.0-76-powerpc-e500mcUpgrade linux-image-3.13.0-91-genericUpgrade linux-image-4.4.0-28-lowlatencyUpgrade linux-image-4.2.0-1033-raspi2Upgrade linux-image-3.19.0-64-powerpc64-embUpgrade linux-image-3.2.0-105-virtualUpgrade linux-image-3.2.0-1483-omap4Upgrade linux-image-3.2.0-105-generic-paeUpgrade linux-image-4.4.0-28-genericUpgrade linux-image-4.4.0-28-powerpc64-smpUpgrade linux-image-4.4.0-28-powerpc64-embUpgrade linux-image-4.2.0-41-lowlatencyUpgrade linux-image-3.2.0-105-powerpc64-smpUpgrade linux-image-3.16.0-76-generic-lpaeUpgrade linux-image-3.19.0-64-powerpc64-smpUpgrade linux-image-3.16.0-76-genericUpgrade linux-image-3.16.0-76-lowlatencyUpgrade linux-image-3.2.0-105-highbankUpgrade linux-image-3.19.0-64-powerpc-smpUpgrade linux-image-3.13.0-91-lowlatencyUpgrade linux-image-3.19.0-64-generic-lpaeUpgrade linux-image-4.4.0-28-powerpc-smpUpgrade linux-image-4.4.0-1019-snapdragonUpgrade linux-image-3.16.0-76-powerpc64-smpUpgrade linux-image-4.2.0-41-powerpc-e500mcUpgrade linux-image-4.4.0-1016-raspi2Upgrade linux-image-3.2.0-105-powerpc-smpUpgrade linux-image-4.2.0-41-generic-lpaeUpgrade linux-image-3.2.0-105-omapUpgrade linux-image-3.2.0-105-genericUpgrade linux-image-4.2.0-41-powerpc64-embUpgrade linux-image-3.13.0-91-powerpc64-smp | Jun 27, 2016 | May 23, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 23, 2016 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub