Input validation error in Linux kernel - CVE-2016-20022

Vulnerability identifier: #VU94740

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-20022

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input within the usb_parse_endpoint() function in drivers/usb/core/config.c when parsing the wMaxPacketSize field. A local user can perform a denial of service (DoS) attack.

Note, this vulnerability only affects products that are no longer supported by the supplier.

Linux kernel
SUSE Linux Enterprise Server 11
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
kernel-ec2
kernel-trace
kernel-default
kernel-xen
kernel-ec2-devel
kernel-source
kernel-xen-devel
kernel-default-devel
kernel-trace-devel
kernel-trace-base
kernel-xen-base
kernel-syms
kernel-default-base
kernel-ec2-base

Install updates from vendor's website.

kernel-ec2 - update to 3.0.101-108.159.1
kernel-trace - update to 3.0.101-108.159.1
kernel-default - update to 3.0.101-108.159.1
kernel-xen - update to 3.0.101-108.159.1
kernel-ec2-devel - update to 3.0.101-108.159.1
kernel-source - update to 3.0.101-108.159.1
kernel-xen-devel - update to 3.0.101-108.159.1
kernel-default-devel - update to 3.0.101-108.159.1
kernel-trace-devel - update to 3.0.101-108.159.1
kernel-trace-base - update to 3.0.101-108.159.1
kernel-xen-base - update to 3.0.101-108.159.1
kernel-syms - update to 3.0.101-108.159.1
kernel-default-base - update to 3.0.101-108.159.1
kernel-ec2-base - update to 3.0.101-108.159.1

• https://lore.kernel.org/lkml/1486322541-8206-8-git-send-email-w%401wt.eu/
• https://www.spinics.net/lists/linux-usb/msg144177.html
• https://github.com/torvalds/linux/commit/aed9d65ac3278d4febd8665bd7db59ef53e825fe

• Denial of service in Linux kernel USB driver
• SUSE update for the Linux Kernel