Multiple heap-based buffer overflows in the hiddevioctlusage function in drivers/hid/usbhid/hiddev.c in the Linux kernel through 4.6.3 allow local users to cause a denial of service or possibly have unspecified other impact via a crafted (1) HIDIOCGUSAGES or (2) HIDIOCSUSAGES ioctl call.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-5829.json"
[
{
"target": {
"file": "drivers/hid/usbhid/hiddev.c",
"function": "hiddev_ioctl_usage"
},
"digest": {
"length": 2738.0,
"function_hash": "261441116076143184175027928697216563953"
},
"signature_type": "Function",
"id": "CVE-2016-5829-e27d3d82",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@93a2001bdfd5376c3dc2158653034c20392d15c5",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/usbhid/hiddev.c"
},
"digest": {
"line_hashes": [
"108941164561556729233976355714878578952",
"256331066840766969756157447957555448870",
"29062695287649068152249573845101788600",
"227948706414314041935755456895449579311",
"124028570195619990662651152830449975237",
"61970714281443981886559196333599890122",
"74105697510170107151003225771870206340",
"210244346170987994625204277886974787550"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2016-5829-ff5e617c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@93a2001bdfd5376c3dc2158653034c20392d15c5",
"deprecated": false,
"signature_version": "v1"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-5829.json"
[
{
"target": {
"file": "drivers/hid/usbhid/hiddev.c",
"function": "hiddev_ioctl_usage"
},
"digest": {
"length": 2738.0,
"function_hash": "261441116076143184175027928697216563953"
},
"signature_type": "Function",
"id": "CVE-2016-5829-0e606abb",
"source": "https://github.com/torvalds/linux/commit/93a2001bdfd5376c3dc2158653034c20392d15c5",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/usbhid/hiddev.c"
},
"digest": {
"line_hashes": [
"108941164561556729233976355714878578952",
"256331066840766969756157447957555448870",
"29062695287649068152249573845101788600",
"227948706414314041935755456895449579311",
"124028570195619990662651152830449975237",
"61970714281443981886559196333599890122",
"74105697510170107151003225771870206340",
"210244346170987994625204277886974787550"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2016-5829-4fa7e408",
"source": "https://github.com/torvalds/linux/commit/93a2001bdfd5376c3dc2158653034c20392d15c5",
"deprecated": false,
"signature_version": "v1"
}
]