Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Wed, 30 Mar 2016 08:52:57 -0400 (EDT)
From: Vladis Dronov <>
Subject: CVE request -- linux kernel: crash on invalid USB device
 descriptors (ims-pcu driver)


If possible, we would like to obtain a CVE-ID for the following
securuty flaw.

A device pretending to be a device driven by the ims-pcu driver,
but leaving out either of the two interfaces present on the genuine
device will crash the driver and possibly the kernel. Thus, DoS
with physical access is possible. Kernels since v3.10 are vulnerable.

Initial reference with a proposed fix:

An upstream patch:

Red Hat security Bugzilla:

Best regards,
Vladis Dronov | Red Hat, Inc. | Product Security Engineer

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ