$ cve CVE-2015-7566 JSON

CVE-2015-7566 EXPLOIT

4.6

MEDIUM · CVSS 3.0 · EPSS 1.8% (pctl 77)

Patch early

A public exploit exists.

Description

The clie_5_attach function in drivers/usb/serial/visor.c in the Linux kernel through 4.4.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by inserting a USB device that lacks a bulk-out endpoint.

Scoring

CVSS	4.6 (MEDIUM, v3.0)
Vector	CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS	1.75% — more likely to be exploited than 77% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2016-02-08
Last modified	2026-06-17

Affected (5)

Vendor	Product
linux	linux kernel
novell	suse linux enterprise debuginfo
novell	suse linux enterprise real time extension
novell	suse linux enterprise server
novell	suse linux enterprise software development kit

Public exploits

Source	Title	Date
exploit-db	Linux Kernel 3.10.0 (CentOS / RHEL 7.1) - visor clie_5_attach Nullpointer Dereference	2016-03-09

References

→ the Explorer · watch your stack · NVD