The mctu232msrtostate function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted USB device without two interrupt-in endpoint descriptors.
[
{
"digest": {
"line_hashes": [
"211811213295238759643575657816760149205",
"95459286062317700203447121118772484349",
"263316890618266342788944079244235847664",
"58187147232235720951938010586775279552",
"114919989378091955173527808025511565617",
"149295520827115381297010297962245838151",
"140254768852644512659775673263834826331",
"132850836554624048323580188677826633545",
"121684732863664824887213211960003251821"
],
"threshold": 0.9
},
"target": {
"file": "drivers/usb/serial/mct_u232.c"
},
"deprecated": false,
"id": "CVE-2016-3136-250b21a5",
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/torvalds/linux/commit/4e9a0b05257f29cf4b75f3209243ed71614d062e"
},
{
"digest": {
"length": 314.0,
"function_hash": "119502808909758832131896657308167199116"
},
"target": {
"file": "drivers/usb/serial/mct_u232.c",
"function": "mct_u232_port_probe"
},
"deprecated": false,
"id": "CVE-2016-3136-acf87367",
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/torvalds/linux/commit/4e9a0b05257f29cf4b75f3209243ed71614d062e"
}
]
[
{
"digest": {
"length": 314.0,
"function_hash": "119502808909758832131896657308167199116"
},
"target": {
"file": "drivers/usb/serial/mct_u232.c",
"function": "mct_u232_port_probe"
},
"deprecated": false,
"id": "CVE-2016-3136-4a3465c9",
"signature_version": "v1",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@4e9a0b05257f29cf4b75f3209243ed71614d062e"
},
{
"digest": {
"line_hashes": [
"211811213295238759643575657816760149205",
"95459286062317700203447121118772484349",
"263316890618266342788944079244235847664",
"58187147232235720951938010586775279552",
"114919989378091955173527808025511565617",
"149295520827115381297010297962245838151",
"140254768852644512659775673263834826331",
"132850836554624048323580188677826633545",
"121684732863664824887213211960003251821"
],
"threshold": 0.9
},
"target": {
"file": "drivers/usb/serial/mct_u232.c"
},
"deprecated": false,
"id": "CVE-2016-3136-fc733016",
"signature_version": "v1",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@4e9a0b05257f29cf4b75f3209243ed71614d062e"
}
]