Tenable802014.PRMMultiple Kernel Versions with Multiple Vulnerabilities
The following vulnerabilities affect kernel versions that fall below the following on the same branch.
Kernel 4.4.7
Kernel 3.14.66
Kernel 4.5.1
Kernel 3.12.58
Kernel 3.18.32
Kernel 4.1.23
Kernel 3.2.80
Kernel 3.10.102
The specific Linux kernel version that the system is running is reportedly affected by the following vulnerabilities:
-
Linux Kernel contains a flaw in the cypress_m8 driver that is triggered during the handling of a specially crafted USB device. This may allow a physically present attacker to crash the system. (CVE-2016-3137)
-
Linux Kernel contains a flaw in the mct_u232_m8 driver that is triggered during the handling of a specially crafted USB device. This may allow a physically present attacker to crash the system. (CVE-2016-3136)
Binary data 802014.prmReferences
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3136
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3137
lists.opensuse.org/opensuse-security-announce/2016-05/msg00000.html
lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html
lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html
lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html
lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html
pivotal.io/security/usn-2970-1
seclists.org/bugtraq/2016/Jun/105
seclists.org/bugtraq/2016/Mar/55
seclists.org/bugtraq/2016/Mar/57
seclists.org/oss-sec/2016/q1/603
seclists.org/oss-sec/2016/q1/604
www.ubuntu.com/usn/usn-2965-1/
www.ubuntu.com/usn/usn-2965-2/
www.ubuntu.com/usn/usn-2965-3/
www.ubuntu.com/usn/usn-2965-4/
www.ubuntu.com/usn/usn-2968-1/
www.ubuntu.com/usn/usn-2968-2/
www.ubuntu.com/usn/usn-2970-1/
www.ubuntu.com/usn/usn-2971-1/
www.ubuntu.com/usn/usn-2971-2/
www.ubuntu.com/usn/usn-2971-3/
www.ubuntu.com/usn/usn-2996-1/
www.ubuntu.com/usn/usn-3000-1/
bugzilla.redhat.com/show_bug.cgi?id=1283368
bugzilla.redhat.com/show_bug.cgi?id=1283370
bugzilla.redhat.com/show_bug.cgi?id=1316996
bugzilla.redhat.com/show_bug.cgi?id=1317007
cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.102
cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.58
cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.66
cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.32
cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.80
cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.23
cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.7
cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1
os-s.net/advisories/OSS-2016-07_cypress_m8.pdf
os-s.net/advisories/OSS-2016-08_mct_u232.pdf
www.debian.org/security/2016/dsa-3607
www.suse.com/support/update/announcement/2016/suse-su-20161203-1.html
www.ubuntu.com/usn/usn-2997-1/
www.ubuntu.com/usn/usn-2998-1/
Related
