EUVD-2016-10787

Malware in sbrugna...

The vulnerability of the usb_parse_endpoint() function (drivers/usb/core/config.c) in the Linux kernel USB driver allows a hacker to induce a service failure.

The vulnerability of the usbparseendpoint function drivers/usb/core/config.c in the Linux kernel USB driver is related to insufficient input data validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2016-20022

In the Linux kernel before 4.8, usbparseendpoint in drivers/usb/core/config.c does not validate the wMaxPacketSize field of an endpoint descriptor. NOTE: This vulnerability only affects products that are no longer supported by the supplier...