Memory leak in the airspyprobe function in drivers/media/usb/airspy/airspy.c in the airspy USB driver in the Linux kernel before 4.7 allows local users to cause a denial of service (memory consumption) via a crafted USB device that emulates many VFLTYPESDR or VFLTYPE_SUBDEV devices and performs many connect and disconnect operations.
[
{
"id": "CVE-2016-5400-0d3d6a6d",
"deprecated": false,
"digest": {
"line_hashes": [
"50121126231083506216230018680456816834",
"27065865570241331489780321979000941119",
"28305806428484436997619320234739447005",
"235410556271080262820348001880824324130",
"310569047996465979232782577094272408630",
"188512667330858938616177985506075547496",
"336622899626028161827600369379740266332",
"292508415282353618119698727877114799086"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "drivers/media/usb/airspy/airspy.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@aa93d1fee85c890a34f2510a310e55ee76a27848",
"signature_type": "Line"
},
{
"id": "CVE-2016-5400-992dbb41",
"deprecated": false,
"digest": {
"function_hash": "108996493484725995522076056974672307246",
"length": 3526.0
},
"signature_version": "v1",
"target": {
"function": "airspy_probe",
"file": "drivers/media/usb/airspy/airspy.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@aa93d1fee85c890a34f2510a310e55ee76a27848",
"signature_type": "Function"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-5400.json"
[
{
"id": "CVE-2016-5400-1b1b0a17",
"deprecated": false,
"digest": {
"line_hashes": [
"50121126231083506216230018680456816834",
"27065865570241331489780321979000941119",
"28305806428484436997619320234739447005",
"235410556271080262820348001880824324130",
"310569047996465979232782577094272408630",
"188512667330858938616177985506075547496",
"336622899626028161827600369379740266332",
"292508415282353618119698727877114799086"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "drivers/media/usb/airspy/airspy.c"
},
"source": "https://github.com/torvalds/linux/commit/aa93d1fee85c890a34f2510a310e55ee76a27848",
"signature_type": "Line"
},
{
"id": "CVE-2016-5400-6f7900a7",
"deprecated": false,
"digest": {
"function_hash": "108996493484725995522076056974672307246",
"length": 3526.0
},
"signature_version": "v1",
"target": {
"function": "airspy_probe",
"file": "drivers/media/usb/airspy/airspy.c"
},
"source": "https://github.com/torvalds/linux/commit/aa93d1fee85c890a34f2510a310e55ee76a27848",
"signature_type": "Function"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-5400.json"