Vulnerability Description
The clie_5_attach function in drivers/usb/serial/visor.c in the Linux kernel through 4.4.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by inserting a USB device that lacks a bulk-out endpoint.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Novell | Suse Linux Enterprise Software Development Kit | 11 |
| Novell | Suse Linux Enterprise Debuginfo | 11 |
| Novell | Suse Linux Enterprise Real Time Extension | 11 |
| Novell | Suse Linux Enterprise Server | 11 |
| Linux | Linux Kernel | <= 4.4.1 |
References
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cb3232Vendor Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.h
- http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175792.ht
- http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176194.ht
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html
- http://www.debian.org/security/2016/dsa-3448
- http://www.debian.org/security/2016/dsa-3503
- http://www.securityfocus.com/archive/1/537733/100/0/threaded
- http://www.securityfocus.com/bid/82975
- http://www.ubuntu.com/usn/USN-2929-1
- http://www.ubuntu.com/usn/USN-2929-2
- http://www.ubuntu.com/usn/USN-2930-1
FAQ
What is CVE-2015-7566?
CVE-2015-7566 is a vulnerability with a CVSS score of 4.6 (MEDIUM). The clie_5_attach function in drivers/usb/serial/visor.c in the Linux kernel through 4.4.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash...
How severe is CVE-2015-7566?
CVE-2015-7566 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-7566?
Check the references section above for vendor advisories and patch information. Affected products include: Novell Suse Linux Enterprise Software Development Kit, Novell Suse Linux Enterprise Debuginfo, Novell Suse Linux Enterprise Real Time Extension, Novell Suse Linux Enterprise Server, Linux Linux Kernel.