Strix
26.1K

CVE-2016-3689

UnknownEPSS 0.59%

Last modified

CVE-2016-3689 is a vulnerability of currently unknown severity. The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (system crash) via a USB device without both a master and a slave interface.. EPSS estimates a 0.59% chance of exploitation in the next 30 days.

Description

The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (system crash) via a USB device without both a master and a slave interface.

Metrics

EPSS Probability
0.59%

43.5th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersionsUpdate
NovellSuse Linux Enterprise Software Development Kit12.0—
NovellSuse Linux Enterprise Desktop12.0—
NovellSuse Linux Enterprise Live Patching12.0—
NovellSuse Linux Enterprise Module For Public Cloud12.0—
NovellSuse Linux Enterprise Real Time Extension12.0Sp1
NovellSuse Linux Enterprise Server12.0—
NovellSuse Linux Enterprise Workstation Extension12.0—
LinuxLinux Kernel<= 4.5.0—
CanonicalUbuntu Linux14.04—

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2016-3689?
The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (system crash) via a USB device without both a master and a slave interface.
How severe is CVE-2016-3689?
Severity scoring for CVE-2016-3689 is pending analysis. The EPSS model estimates a 0.59% probability of exploitation in the next 30 days.
How do I fix CVE-2016-3689?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2016-3689?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST