The atiremote2probe function in drivers/input/misc/ati_remote2.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.
[
    {
        "id": "CVE-2016-2185-090674a9",
        "target": {
            "file": "drivers/input/misc/ati_remote2.c"
        },
        "signature_version": "v1",
        "source": "https://github.com/torvalds/linux/commit/950336ba3e4a1ffd2ca60d29f6ef386dd2c7351d",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "303182995391871532422864299523556360034",
                "308024274880248520181552673647659072671",
                "176553025359099533066433357372316717673",
                "51455200619110932710462274802249157192",
                "294298375574185309813518396670534422651",
                "128226492481925372211448232443841682436",
                "19612796718224552651998026024231671641",
                "293092660452159576339012039473193944567",
                "114358698040216577116200737545377341317",
                "29861864663833769610780909831157853545",
                "159973852491396819740735341507111842148",
                "196172364885537061996629281480690396297",
                "72072752744644939984285065397908715230",
                "164020291545789488457438624993329721796",
                "245116240985716235469996051281923910771",
                "131599179364668205655280252626324994046",
                "231457572176077862090427687536880301892",
                "14868276064557446146905603329177695729",
                "295349096979595525423665336768053268804",
                "188555408025304756836439541864674622851",
                "66222246374237227142020709658780494228",
                "231164885299905452653338223806602442666",
                "61499924913225003329315538396595950892",
                "265312295891316603577518785792776026729",
                "233143844207509464010623656562099061159",
                "176564851755122478072595372640878203706",
                "253953561147602697265305766671642258366",
                "35066037914233425831675910092388452260",
                "317914351890947519370520328999542229149",
                "145336319602023031524930883005096515882",
                "38319227551984977220505230845047635696",
                "291103173679858448324978962211533549984",
                "110921195094554902730429202762489693733"
            ]
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "id": "CVE-2016-2185-d9b6056b",
        "target": {
            "function": "ati_remote2_probe",
            "file": "drivers/input/misc/ati_remote2.c"
        },
        "signature_version": "v1",
        "source": "https://github.com/torvalds/linux/commit/950336ba3e4a1ffd2ca60d29f6ef386dd2c7351d",
        "digest": {
            "function_hash": "230062376401454867313668096057396397350",
            "length": 1426.0
        },
        "deprecated": false,
        "signature_type": "Function"
    }
]