The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@4ec0ef3a82125efc36173062a50624550a900ae0",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "iowarrior_probe",
"file": "drivers/usb/misc/iowarrior.c"
},
"id": "CVE-2016-2188-292780fe",
"digest": {
"length": 3011.0,
"function_hash": "271003846988580863513481664291297406963"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@4ec0ef3a82125efc36173062a50624550a900ae0",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/usb/misc/iowarrior.c"
},
"id": "CVE-2016-2188-3fb0d2c4",
"digest": {
"threshold": 0.9,
"line_hashes": [
"338673219251368466470264176511118273249",
"69152626343595301169153405652350687341",
"11768763626067318237360247835437922610"
]
},
"signature_type": "Line"
}
]
[
{
"source": "https://github.com/torvalds/linux/commit/4ec0ef3a82125efc36173062a50624550a900ae0",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "iowarrior_probe",
"file": "drivers/usb/misc/iowarrior.c"
},
"id": "CVE-2016-2188-7d13c875",
"digest": {
"length": 3011.0,
"function_hash": "271003846988580863513481664291297406963"
},
"signature_type": "Function"
},
{
"source": "https://github.com/torvalds/linux/commit/4ec0ef3a82125efc36173062a50624550a900ae0",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/usb/misc/iowarrior.c"
},
"id": "CVE-2016-2188-90cf37a0",
"digest": {
"threshold": 0.9,
"line_hashes": [
"338673219251368466470264176511118273249",
"69152626343595301169153405652350687341",
"11768763626067318237360247835437922610"
]
},
"signature_type": "Line"
}
]