The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by inserting a USB device that lacks a (1) bulk-in or (2) interrupt-in endpoint.
[
{
"signature_type": "Function",
"digest": {
"length": 1228.0,
"function_hash": "113204210415391450216015923705288192490"
},
"target": {
"file": "drivers/usb/serial/visor.c",
"function": "treo_attach"
},
"signature_version": "v1",
"id": "CVE-2016-2782-b0884265",
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/cac9b50b0d75a1d50d6c056ff65c005f3224c8e0"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"239428388050216649691242582643086613900",
"225283219325082454293752485510698994538",
"241750542055782339971846178960263109867"
]
},
"target": {
"file": "drivers/usb/serial/visor.c"
},
"signature_version": "v1",
"id": "CVE-2016-2782-b618a318",
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/cac9b50b0d75a1d50d6c056ff65c005f3224c8e0"
}
]