CVE - CVE-2015-8816

CVE-ID
CVE-2015-8816	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate attackers to cause a denial of service (invalid memory access and system crash) or possibly have unspecified other impact by unplugging a USB hub device.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:83363 URL:http://www.securityfocus.com/bid/83363 CONFIRM:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e50293ef9775c5f1cf3fcc093037dd6a8c5684ea CONFIRM:http://source.android.com/security/bulletin/2016-07-01.html CONFIRM:http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.5 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html CONFIRM:http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1311589 CONFIRM:https://github.com/torvalds/linux/commit/e50293ef9775c5f1cf3fcc093037dd6a8c5684ea DEBIAN:DSA-3503 URL:http://www.debian.org/security/2016/dsa-3503 MLIST:[oss-security] 20160223 CVE Request: Linux kernel USB hub invalid memory access in hub_activate() URL:http://www.openwall.com/lists/oss-security/2016/02/23/5 SUSE:SUSE-SU-2016:1019 URL:http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html SUSE:SUSE-SU-2016:1672 URL:http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html SUSE:SUSE-SU-2016:1690 URL:http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html SUSE:SUSE-SU-2016:1707 URL:http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html SUSE:SUSE-SU-2016:1764 URL:http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html SUSE:SUSE-SU-2016:1961 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html SUSE:SUSE-SU-2016:1994 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html SUSE:SUSE-SU-2016:1995 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html SUSE:SUSE-SU-2016:2001 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html SUSE:SUSE-SU-2016:2002 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html SUSE:SUSE-SU-2016:2005 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html SUSE:SUSE-SU-2016:2006 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html SUSE:SUSE-SU-2016:2007 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html SUSE:SUSE-SU-2016:2009 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html SUSE:SUSE-SU-2016:2010 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html SUSE:SUSE-SU-2016:2014 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html SUSE:SUSE-SU-2016:2074 URL:http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html
Assigning CNA
MITRE Corporation
Date Record Created
20160223	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20160223)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)