peter bassill · operator
$ cve CVE-2016-3140 JSON

CVE-2016-3140 EXPLOIT

4.6
MEDIUM · CVSS 3.0 · EPSS 1.8% (pctl 78)

Patch early

A public exploit exists.

Description

The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.

Scoring

CVSS4.6 (MEDIUM, v3.0)
VectorCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS1.79% — more likely to be exploited than 78% of all CVEs
On CISA KEVno
Public exploityes
Published2016-05-02
Last modified2026-06-17

Affected (10)

VendorProduct
canonicalubuntu linux
linuxlinux kernel
novellsuse linux enterprise debuginfo
novellsuse linux enterprise desktop
novellsuse linux enterprise live patching
novellsuse linux enterprise module for public cloud
novellsuse linux enterprise real time extension
novellsuse linux enterprise server
novellsuse linux enterprise software development kit
novellsuse linux enterprise workstation extension

Public exploits

SourceTitleDate
exploit-dbLinux Kernel 3.10.0 (CentOS / RHEL 7.1) - 'digi_acceleport' Nullpointer Dereference2016-03-09

References

→ the Explorer  ·  watch your stack  ·  NVD