CVE-2016-2384
- State
- Published
- Severity
- Not scored
- Published
- Apr 27, 2016
- Updated
- Aug 5, 2024
- Reserved
- Feb 14, 2016
Description
Double free vulnerability in the snd_usbmidi_create function in sound/usb/midi.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (panic) or possibly have unspecified other impact via vectors involving an invalid USB descriptor.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 1035072vdb-entry
- USN-2930-1vendor-advisory
- [oss-security] 20160214 CVE Request: Linux: ALSA: usb-audio: double-free triggered by invalid USB descriptormailing-list
- SUSE-SU-2016:1038vendor-advisory
- SUSE-SU-2016:1033vendor-advisory
- USN-2930-2vendor-advisory
- DSA-3503vendor-advisory
- SUSE-SU-2016:1034vendor-advisory
- RHSA-2016:2584vendor-advisory
- SUSE-SU-2016:1035vendor-advisory
- RHSA-2016:2574vendor-advisory
- SUSE-SU-2016:1764vendor-advisory
- SUSE-SU-2016:1031vendor-advisory
- USN-2930-3vendor-advisory
- https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-2384
- SUSE-SU-2016:1102vendor-advisory
- https://github.com/torvalds/linux/commit/07d86ca93db7e5cdf4743564d98292042ec21af7
- RHSA-2017:0817vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1308444
- SUSE-SU-2016:1019vendor-advisory
- SUSE-SU-2016:1037vendor-advisory
- SUSE-SU-2016:1045vendor-advisory
- USN-2929-1vendor-advisory
- USN-2932-1vendor-advisory
- SUSE-SU-2016:1032vendor-advisory
- SUSE-SU-2016:1039vendor-advisory
- SUSE-SU-2016:2074vendor-advisory
- SUSE-SU-2016:1041vendor-advisory
- SUSE-SU-2016:1046vendor-advisory
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=07d86ca93db7e5cdf4743564d98292042ec21af7
- USN-2928-1vendor-advisory
- USN-2931-1vendor-advisory
- USN-2928-2vendor-advisory
- 83256vdb-entry
- openSUSE-SU-2016:1008vendor-advisory
- USN-2929-2vendor-advisory
- SUSE-SU-2016:1040vendor-advisory
- SUSE-SU-2016:0911vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.