In the Linux kernel before 4.8, usbparseendpoint in drivers/usb/core/config.c does not validate the wMaxPacketSize field of an endpoint descriptor. NOTE: This vulnerability only affects products that are no longer supported by the supplier.
{ "vanir_signatures": [ { "id": "CVE-2016-20022-2e4708d9", "digest": { "length": 3529.0, "function_hash": "39194689656507191163208865883328440578" }, "signature_version": "v1", "target": { "file": "drivers/usb/core/config.c", "function": "usb_parse_endpoint" }, "deprecated": false, "signature_type": "Function", "source": "https://github.com/torvalds/linux/commit/aed9d65ac3278d4febd8665bd7db59ef53e825fe" }, { "id": "CVE-2016-20022-a5bbf872", "digest": { "line_hashes": [ "249813441630085337766734436084684640724", "185143746229615347538107096159546972953", "21263626327892308459031964473346323432", "2458171593905780904869974447363587334", "18066420109196701810766709543657752096", "201145491469158029591311183542681687572", "1572217031853862025085602878991280456", "258920420296163978682442396306242126332", "181014577375416761378452965241459948025", "137560859129275315220663193017694908790", "300282709443276632489946956039318342984", "207424915370438124017466717454351648126", "304669427407609015783880337065419119489", "157689192949831288471102347335939200436" ], "threshold": 0.9 }, "signature_version": "v1", "target": { "file": "drivers/usb/core/config.c" }, "deprecated": false, "signature_type": "Line", "source": "https://github.com/torvalds/linux/commit/aed9d65ac3278d4febd8665bd7db59ef53e825fe" } ] }