ID:9898 - Exploit for NULL pointer dereference in Linux kernel - CVE-2016-3136

 
Main Vulnerability Database Exploits ID:9898 - Exploit for NULL pointer dereference in Linux kernel - CVE-2016-3136

ID:9898 - Exploit for NULL pointer dereference in Linux kernel - CVE-2016-3136

Published: June 1, 2024


Vulnerability identifier: #VU90679
Vulnerability risk: Low
CVE-ID: CVE-2016-3136
CWE-ID: CWE-476
Exploitation vector: Local access
Vulnerable software:
Linux kernel

Link to public exploit:


Vulnerability description

The vulnerability allows a local non-authenticated attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the mct_u232_msr_to_state() function in drivers/usb/serial/mct_u232.c. A local non-authenticated attacker can perform a denial of service (DoS) attack.


Remediation

Install update from vendor's website.