The atiremote2probe function in drivers/input/misc/ati_remote2.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.
[
{
"id": "CVE-2016-2185-2dbf3b82",
"deprecated": false,
"target": {
"function": "ati_remote2_probe",
"file": "drivers/input/misc/ati_remote2.c"
},
"digest": {
"length": 1426.0,
"function_hash": "230062376401454867313668096057396397350"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@950336ba3e4a1ffd2ca60d29f6ef386dd2c7351d",
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2016-2185-ef8457b8",
"deprecated": false,
"target": {
"file": "drivers/input/misc/ati_remote2.c"
},
"digest": {
"line_hashes": [
"303182995391871532422864299523556360034",
"308024274880248520181552673647659072671",
"176553025359099533066433357372316717673",
"51455200619110932710462274802249157192",
"294298375574185309813518396670534422651",
"128226492481925372211448232443841682436",
"19612796718224552651998026024231671641",
"293092660452159576339012039473193944567",
"114358698040216577116200737545377341317",
"29861864663833769610780909831157853545",
"159973852491396819740735341507111842148",
"196172364885537061996629281480690396297",
"72072752744644939984285065397908715230",
"164020291545789488457438624993329721796",
"245116240985716235469996051281923910771",
"131599179364668205655280252626324994046",
"231457572176077862090427687536880301892",
"14868276064557446146905603329177695729",
"295349096979595525423665336768053268804",
"188555408025304756836439541864674622851",
"66222246374237227142020709658780494228",
"231164885299905452653338223806602442666",
"61499924913225003329315538396595950892",
"265312295891316603577518785792776026729",
"233143844207509464010623656562099061159",
"176564851755122478072595372640878203706",
"253953561147602697265305766671642258366",
"35066037914233425831675910092388452260",
"317914351890947519370520328999542229149",
"145336319602023031524930883005096515882",
"38319227551984977220505230845047635696",
"291103173679858448324978962211533549984",
"110921195094554902730429202762489693733"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@950336ba3e4a1ffd2ca60d29f6ef386dd2c7351d",
"signature_version": "v1",
"signature_type": "Line"
}
]
[
{
"id": "CVE-2016-2185-090674a9",
"deprecated": false,
"target": {
"file": "drivers/input/misc/ati_remote2.c"
},
"digest": {
"line_hashes": [
"303182995391871532422864299523556360034",
"308024274880248520181552673647659072671",
"176553025359099533066433357372316717673",
"51455200619110932710462274802249157192",
"294298375574185309813518396670534422651",
"128226492481925372211448232443841682436",
"19612796718224552651998026024231671641",
"293092660452159576339012039473193944567",
"114358698040216577116200737545377341317",
"29861864663833769610780909831157853545",
"159973852491396819740735341507111842148",
"196172364885537061996629281480690396297",
"72072752744644939984285065397908715230",
"164020291545789488457438624993329721796",
"245116240985716235469996051281923910771",
"131599179364668205655280252626324994046",
"231457572176077862090427687536880301892",
"14868276064557446146905603329177695729",
"295349096979595525423665336768053268804",
"188555408025304756836439541864674622851",
"66222246374237227142020709658780494228",
"231164885299905452653338223806602442666",
"61499924913225003329315538396595950892",
"265312295891316603577518785792776026729",
"233143844207509464010623656562099061159",
"176564851755122478072595372640878203706",
"253953561147602697265305766671642258366",
"35066037914233425831675910092388452260",
"317914351890947519370520328999542229149",
"145336319602023031524930883005096515882",
"38319227551984977220505230845047635696",
"291103173679858448324978962211533549984",
"110921195094554902730429202762489693733"
],
"threshold": 0.9
},
"source": "https://github.com/torvalds/linux/commit/950336ba3e4a1ffd2ca60d29f6ef386dd2c7351d",
"signature_version": "v1",
"signature_type": "Line"
},
{
"id": "CVE-2016-2185-d9b6056b",
"deprecated": false,
"target": {
"function": "ati_remote2_probe",
"file": "drivers/input/misc/ati_remote2.c"
},
"digest": {
"length": 1426.0,
"function_hash": "230062376401454867313668096057396397350"
},
"source": "https://github.com/torvalds/linux/commit/950336ba3e4a1ffd2ca60d29f6ef386dd2c7351d",
"signature_version": "v1",
"signature_type": "Function"
}
]