Multiple heap-based buffer overflows in the hiddev_ioctl_usage function in drivers/hid/usbhid/hiddev.c in the Linux kernel through 4.6.3 allow local users to cause a denial of service or possibly have unspecified other impact via a crafted (1) HIDIOCGUSAGES or (2) HIDIOCSUSAGES ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade python-perfUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-abi-whitelistsUpgrade kernel-firmwareUpgrade kernel-docUpgrade kernel-headersUpgrade perf | Oct 21, 2016 | Jun 27, 2016 |
| Debian | — | Upgrade linux | Jul 4, 2016 | Jun 27, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Oct 22, 2016 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 7, 2016 | Jun 25, 2016 |
| Redhat_linux | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-docUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-s390xUpgrade kernel-abi-whitelistsUpgrade kernel-tools-libs-develUpgrade kernel-kdump-debuginfoUpgrade python-perfNo solution existsUpgrade kernel-rt-docUpgrade kernel-rt-traceUpgrade kernel-bootwrapperUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-ppc64Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-i686Upgrade kernel-firmwareUpgrade kernel-rt-trace-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-debugUpgrade kernel-headersUpgrade kernel-kdumpUpgrade kernel-debug-develUpgrade perfUpgrade kernel-rt-develUpgrade kernel-kdump-develUpgrade kernel-rt-trace-debuginfo | Oct 21, 2016 | Jun 27, 2016 |
| Suse | — | Upgrade kernel-docsUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2-develUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-ec2Upgrade kernel-obs-build | Jul 26, 2016 | Jun 27, 2016 |
| Ubuntu | — | Upgrade linux-image-3.2.0-109-highbankUpgrade linux-image-3.2.0-1487-omap4Upgrade linux-image-3.13.0-95-powerpc-e500mcUpgrade linux-image-3.13.0-95-powerpc64-smpUpgrade linux-image-4.4.0-36-powerpc64-embUpgrade linux-image-3.13.0-95-genericUpgrade linux-image-3.13.0-95-powerpc64-embUpgrade linux-image-4.4.0-36-lowlatencyUpgrade linux-image-4.4.0-36-powerpc-smpUpgrade linux-image-4.4.0-36-powerpc-e500mcUpgrade linux-image-3.13.0-95-lowlatencyUpgrade linux-image-4.4.0-36-generic-lpaeUpgrade linux-image-3.13.0-95-powerpc-smpUpgrade linux-image-3.2.0-109-powerpc64-smpUpgrade linux-image-4.4.0-36-powerpc64-smpUpgrade linux-image-3.2.0-109-genericUpgrade linux-image-3.13.0-95-powerpc-e500Upgrade linux-image-3.2.0-109-virtualUpgrade linux-image-3.13.0-95-generic-lpaeUpgrade linux-image-3.2.0-109-generic-paeUpgrade linux-image-4.4.0-36-genericUpgrade linux-image-3.2.0-109-omapUpgrade linux-image-4.4.0-1024-snapdragonUpgrade linux-image-3.2.0-109-powerpc-smpUpgrade linux-image-4.4.0-1021-raspi2 | Aug 29, 2016 | Jun 27, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 27, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub