The digiportinit function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.
[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"308622387642242004237416632596702999617",
"89710143898736974260020395118485300248",
"269613628922056326764675234632555478908",
"68985817556591657339359093485209081336",
"221505667450836215665243441238710209744",
"330062385425176017268198932286696945881"
]
},
"target": {
"file": "drivers/usb/serial/digi_acceleport.c"
},
"id": "CVE-2016-3140-d14c6b1d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@5a07975ad0a36708c6b0a5b9fea1ff811d0b0c1f",
"deprecated": false
},
{
"digest": {
"function_hash": "127318634084352023610069991625545097545",
"length": 458.0
},
"target": {
"function": "digi_startup",
"file": "drivers/usb/serial/digi_acceleport.c"
},
"id": "CVE-2016-3140-d7e671a2",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@5a07975ad0a36708c6b0a5b9fea1ff811d0b0c1f",
"deprecated": false
}
]
[
{
"digest": {
"function_hash": "127318634084352023610069991625545097545",
"length": 458.0
},
"target": {
"function": "digi_startup",
"file": "drivers/usb/serial/digi_acceleport.c"
},
"id": "CVE-2016-3140-b0848457",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/5a07975ad0a36708c6b0a5b9fea1ff811d0b0c1f",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"308622387642242004237416632596702999617",
"89710143898736974260020395118485300248",
"269613628922056326764675234632555478908",
"68985817556591657339359093485209081336",
"221505667450836215665243441238710209744",
"330062385425176017268198932286696945881"
]
},
"target": {
"file": "drivers/usb/serial/digi_acceleport.c"
},
"id": "CVE-2016-3140-dbc9a6ba",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/5a07975ad0a36708c6b0a5b9fea1ff811d0b0c1f",
"deprecated": false
}
]