CVE-2016-3139

Description

The wacom_probe function in drivers/input/tablet/wacom_sys.c in the Linux kernel before 3.17 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
linux	16.04 LTS xenial	Not affected
	15.10 wily	Not affected
	14.04 LTS trusty	Not affected
	12.04 LTS precise	Not affected
linux-armadaxp	16.04 LTS xenial	Not in release
	15.10 wily	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not affected
linux-flo	16.04 LTS xenial	Not in release
	15.10 wily	Not affected
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-goldfish	16.04 LTS xenial	Not in release
	15.10 wily	Not affected
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-grouper	16.04 LTS xenial	Not in release
	15.10 wily	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-linaro-omap	16.04 LTS xenial	Not in release
	15.10 wily	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life
linux-linaro-shared	16.04 LTS xenial	Not in release
	15.10 wily	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life
linux-linaro-vexpress	16.04 LTS xenial	Not in release
	15.10 wily	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life
linux-lts-quantal	16.04 LTS xenial	Not in release
	15.10 wily	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life
linux-lts-raring	16.04 LTS xenial	Not in release
	15.10 wily	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life
linux-lts-saucy	16.04 LTS xenial	Not in release
	15.10 wily	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life
linux-lts-trusty	16.04 LTS xenial	Not in release
	15.10 wily	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not affected
linux-lts-utopic	16.04 LTS xenial	Not in release
	15.10 wily	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-lts-vivid	16.04 LTS xenial	Not in release
	15.10 wily	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-lts-wily	16.04 LTS xenial	Not in release
	15.10 wily	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-lts-xenial	16.04 LTS xenial	Not in release
	15.10 wily	Not in release
	14.04 LTS trusty	Not affected
	12.04 LTS precise	Not in release
linux-maguro	16.04 LTS xenial	Not in release
	15.10 wily	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-mako	16.04 LTS xenial	Not in release
	15.10 wily	Not affected
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-manta	16.04 LTS xenial	Not in release
	15.10 wily	Not affected
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-qcm-msm	16.04 LTS xenial	Not in release
	15.10 wily	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Ignored end of life
linux-raspi2	16.04 LTS xenial	Not affected
	15.10 wily	Not affected
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-snapdragon	16.04 LTS xenial	Not affected
	15.10 wily	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
linux-ti-omap4	16.04 LTS xenial	Not in release
	15.10 wily	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not affected

Notes

jdstrand

android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.10 and earlier preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support

sbeattie

may be RHEL 7 only

Severity score breakdown

Parameter	Value
Base score	4.6 · Medium
Attack vector	Physical
Attack complexity	Low
Privileges required	None
User interaction	None
Scope	Unchanged
Confidentiality	None
Integrity impact	None
Availability impact	High
Vector	CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Cvss 3 Severity Score