Red Hat Bugzilla – Bug 1320060
CVE-2016-3689 kernel: denial of service via malicious device using ims-pcu driver
Last modified: 2016-03-30 15:34:01 EDT
A vulnerability was found in the Linux kernel. A device pretending to be a device driven by the ims-pcu driver but leaving out either of the two interfaces present on the genuine device will oops the driver. Reference with proposed fix: https://bugzilla.novell.com/show_bug.cgi?id=971628 Linux-input maintainer tree patch: https://kernel.googlesource.com/pub/scm/linux/kernel/git/dtor/input/+/a0ad220c96692eda76b2e3fd7279f3dcd1d8a8ff An upstream patch: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a0ad220c96692eda76b2e3fd7279f3dcd1d8a8ff CVE-ID request: http://seclists.org/oss-sec/2016/q1/715 CVE-ID assignment: http://seclists.org/oss-sec/2016/q1/717
Created kernel tracking bugs for this issue: Affects: fedora-all [bug 1320061]
Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6 as the code with the flaw is not present in the products listed. This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 7 and MRG-2. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.
CVE assignment: http://seclists.org/oss-sec/2016/q1/717