Memory leak in Airspy USB device driver in Linux kernel - CVE-2016-5400

Vulnerability identifier: #VU217

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-5400

CWE-ID: CWE-401

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to consume excessive memory and cause denial of service on the target system.

The vulnerability exists due to a resource error in Airspy USB device driver. A local user can cause a memory leak and consume all available memory resources by creating a specially crafted USB device to emulate multiple SDR devices.

Successful exploitation of this vulnerability may result in denial of service.

Linux kernel
Fedora
kernel

Solution for this vulnerability can be found at:
https://git.linuxtv.org/media_tree.git/commit/?id=eca2d34b9d2ce70165a50510659838e28ca22742

kernel - addressed in versions 4.6.5-200.fc23, 4.6.5-300.fc24

• http://www.openwall.com/lists/oss-security/2016/07/25/1
• https://git.linuxtv.org/media_tree.git/commit/?id=eca2d34b9d2ce70165a50510659838e28ca22742

• Memory leak in Airspy USB device driver in Linux kernel
• Fedora 23 update for kernel
• Fedora 24 update for kernel