The powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.
[ { "deprecated": false, "digest": { "line_hashes": [ "206336544314611060878319801304235066470", "231744591405941565333395523297977079171", "273257069202475290236304390365570580139", "229071769072167182256246363332293309378" ], "threshold": 0.9 }, "signature_type": "Line", "id": "CVE-2016-2186-53e8cfa3", "target": { "file": "drivers/input/misc/powermate.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@9c6ba456711687b794dcf285856fc14e2c76074f", "signature_version": "v1" }, { "deprecated": false, "digest": { "length": 2895.0, "function_hash": "278208216334330630216782710037093003059" }, "signature_type": "Function", "id": "CVE-2016-2186-58a5e8a2", "target": { "file": "drivers/input/misc/powermate.c", "function": "powermate_probe" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@9c6ba456711687b794dcf285856fc14e2c76074f", "signature_version": "v1" } ]
[ { "deprecated": false, "digest": { "length": 2895.0, "function_hash": "278208216334330630216782710037093003059" }, "signature_type": "Function", "id": "CVE-2016-2186-927dba23", "target": { "file": "drivers/input/misc/powermate.c", "function": "powermate_probe" }, "source": "https://github.com/torvalds/linux/commit/9c6ba456711687b794dcf285856fc14e2c76074f", "signature_version": "v1" }, { "deprecated": false, "digest": { "line_hashes": [ "206336544314611060878319801304235066470", "231744591405941565333395523297977079171", "273257069202475290236304390365570580139", "229071769072167182256246363332293309378" ], "threshold": 0.9 }, "signature_type": "Line", "id": "CVE-2016-2186-d179c604", "target": { "file": "drivers/input/misc/powermate.c" }, "source": "https://github.com/torvalds/linux/commit/9c6ba456711687b794dcf285856fc14e2c76074f", "signature_version": "v1" } ]