CVE-2016-3951

Description

Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly have unspecified other impact by inserting a USB device with an invalid USB descriptor.

4.6

CVSS

Severity: Medium

CVSS 3.0 •

CVSS 2.0 •

EPSS 0.04%

Vendor Advisory opensuse.org Vendor Advisory ubuntu.com Vendor Advisory ubuntu.com Vendor Advisory opensuse.org Vendor Advisory ubuntu.com Vendor Advisory opensuse.org Vendor Advisory ubuntu.com Vendor Advisory debian.org Vendor Advisory ubuntu.com Vendor Advisory ubuntu.com Vendor Advisory ubuntu.com Vendor Advisory opensuse.org Vendor Advisory ubuntu.com Vendor Advisory ubuntu.com Vendor Advisory kernel.org Vendor Advisory kernel.org Vendor Advisory github.com Vendor Advisory github.com

Affected: n/a n/a

References

Link	Tags
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html	third party advisory vendor advisory
http://www.ubuntu.com/usn/USN-3004-1	third party advisory vendor advisory
http://www.ubuntu.com/usn/USN-3001-1	third party advisory vendor advisory
https://github.com/torvalds/linux/commit/4d06dd537f95683aba3651098ae288b7cbff8274	vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html	third party advisory vendor advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1324782	issue tracking
http://www.ubuntu.com/usn/USN-3021-2	third party advisory vendor advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1666984c8625b3db19a9abc298931d35ab7bc64b	vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html	third party advisory vendor advisory
http://www.ubuntu.com/usn/USN-3000-1	third party advisory vendor advisory
http://www.debian.org/security/2016/dsa-3607	vendor advisory
http://www.securityfocus.com/bid/91028	vdb entry
http://www.securitytracker.com/id/1036763	vdb entry
http://www.ubuntu.com/usn/USN-3002-1	third party advisory vendor advisory
http://www.ubuntu.com/usn/USN-3021-1	third party advisory vendor advisory
http://www.openwall.com/lists/oss-security/2016/04/06/4	mailing list
https://github.com/torvalds/linux/commit/1666984c8625b3db19a9abc298931d35ab7bc64b	vendor advisory
http://www.ubuntu.com/usn/USN-2989-1	third party advisory vendor advisory
https://www.spinics.net/lists/netdev/msg367669.html	mailing list
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html	vendor advisory
http://www.ubuntu.com/usn/USN-3003-1	third party advisory vendor advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4d06dd537f95683aba3651098ae288b7cbff8274	vendor advisory
http://www.ubuntu.com/usn/USN-2998-1	third party advisory vendor advisory

Frequently Asked Questions

What is the severity of CVE-2016-3951?: CVE-2016-3951 has been scored as a medium severity vulnerability.
How to fix CVE-2016-3951?: To fix CVE-2016-3951, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2016-3951 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2016-3951 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.