CVE-2016-7915

The hid_input_field function in drivers/hid/hid-core.c in the Linux kernel before 4.6 allows physically proximate attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read) by connecting a device, as demonstrated by a Logitech DJ receiver.

• CWE-125

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=50220dead1650609206efe91f0cc116132d59b3fIssue Tracking, Patch, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2574.html
• http://source.android.com/security/bulletin/2016-11-01.htmlThird Party Advisory
• http://www.securityfocus.com/bid/94138Third Party Advisory, VDB Entry
• https://github.com/torvalds/linux/commit/50220dead1650609206efe91f0cc116132d59b3fIssue Tracking, Patch, Third Party Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=50220dead1650609206efe91f0cc116132d59b3fIssue Tracking, Patch, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2574.html
• http://source.android.com/security/bulletin/2016-11-01.htmlThird Party Advisory
• http://www.securityfocus.com/bid/94138Third Party Advisory, VDB Entry
• https://github.com/torvalds/linux/commit/50220dead1650609206efe91f0cc116132d59b3fIssue Tracking, Patch, Third Party Advisory

Published

Nov 16, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-7909The pcnet_rdra_addr function in hw/net/pcnet.c in QEMU (aka …4.4
• CVE-2016-7910Use-after-free vulnerability in the disk_seqf_stop function …7.8
• CVE-2016-7911Race condition in the get_task_ioprio function in block/iopr…7.8
• CVE-2016-7912Use-after-free vulnerability in the ffs_user_copy_worker fun…7.8
• CVE-2016-7913The xc2028_set_config function in drivers/media/tuners/tuner…7.8
• CVE-2016-7914The assoc_array_insert_into_terminal_node function in lib/as…
• CVE-2016-7916Race condition in the environ_read function in fs/proc/base.…
• CVE-2016-7917The nfnetlink_rcv_batch function in net/netfilter/nfnetlink.…
• CVE-2016-7919Moodle 3.1.2 allows remote attackers to obtain sensitive inf…7.5
• CVE-2016-7921Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-7922The AH parser in tcpdump before 4.9.0 has a buffer overflow …
• CVE-2016-7923The ARP parser in tcpdump before 4.9.0 has a buffer overflow…