Red Hat Bugzilla – Bug 1316993
CVE-2016-3139 kernel: Crash on invalid USB device descriptors (wacom driver)
Last modified: 2016-05-16 09:49:20 EDT
Kernel crash occurs when presented a buggy USB device which requires wacom driver, causing null pointer dereference.
Created kernel tracking bugs for this issue:
Affects: fedora-all [bug 1317010]
CVE request and assignment:
Upstream commit: the upstream driver was rebased and does not have this bug, so this bug is rhel7-only and there is no upstream commit.
Name: Ralf Spenneberg (OpenSource Security)
This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6, 7 and MRG-2. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.