The createfixedstream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference or double free, and system crash) via a crafted endpoints value in a USB device descriptor.
[
{
"id": "CVE-2016-2184-9fef0dc8",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@0f886ca12765d20124bd06291c82951fd49a33be",
"signature_version": "v1",
"digest": {
"line_hashes": [
"325381184591377652902362615760212519703",
"23115800630661807140621552499737863285",
"143394195630945413259087876769814557452",
"116922886278424439721439156219821056685"
],
"threshold": 0.9
},
"target": {
"file": "sound/usb/quirks.c"
},
"signature_type": "Line",
"deprecated": false
},
{
"id": "CVE-2016-2184-c9e4de19",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@0f886ca12765d20124bd06291c82951fd49a33be",
"signature_version": "v1",
"digest": {
"length": 1474.0,
"function_hash": "105313462515673128317079180527563060294"
},
"target": {
"function": "create_fixed_stream_quirk",
"file": "sound/usb/quirks.c"
},
"signature_type": "Function",
"deprecated": false
}
]
[
{
"id": "CVE-2016-2184-066accb4",
"source": "https://github.com/torvalds/linux/commit/0f886ca12765d20124bd06291c82951fd49a33be",
"signature_version": "v1",
"digest": {
"length": 1474.0,
"function_hash": "105313462515673128317079180527563060294"
},
"target": {
"function": "create_fixed_stream_quirk",
"file": "sound/usb/quirks.c"
},
"signature_type": "Function",
"deprecated": false
},
{
"id": "CVE-2016-2184-97ac169f",
"source": "https://github.com/torvalds/linux/commit/0f886ca12765d20124bd06291c82951fd49a33be",
"signature_version": "v1",
"digest": {
"line_hashes": [
"325381184591377652902362615760212519703",
"23115800630661807140621552499737863285",
"143394195630945413259087876769814557452",
"116922886278424439721439156219821056685"
],
"threshold": 0.9
},
"target": {
"file": "sound/usb/quirks.c"
},
"signature_type": "Line",
"deprecated": false
}
]