Medium severity4.6NVD Advisory· Published May 2, 2016· Updated May 6, 2026
CVE-2016-3951
CVE-2016-3951
Description
Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly have unspecified other impact by inserting a USB device with an invalid USB descriptor.
Affected products
15- cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*
- cpe:2.3:a:suse:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*+ 2 more
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
cpe:2.3:o:novell:suse_linux_enterprise_desktop:12:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:novell:suse_linux_enterprise_desktop:12:*:*:*:*:*:*:*
- cpe:2.3:o:novell:suse_linux_enterprise_desktop:12:sp1:*:*:*:*:*:*
- cpe:2.3:o:novell:suse_linux_enterprise_live_patching:12.0:*:*:*:*:*:*:*
- cpe:2.3:o:novell:suse_linux_enterprise_module_for_public_cloud:12:*:*:*:*:*:*:*
- cpe:2.3:o:novell:suse_linux_enterprise_real_time_extension:12:sp1:*:*:*:*:*:*
cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*
- cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*
cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*
- cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:sp1:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
23- git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/nvdVendor Advisory
- git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/nvdVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.htmlnvdThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.htmlnvdThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.htmlnvdThird Party Advisory
- www.ubuntu.com/usn/USN-2989-1nvdThird Party Advisory
- www.ubuntu.com/usn/USN-2998-1nvdThird Party Advisory
- www.ubuntu.com/usn/USN-3000-1nvdThird Party Advisory
- www.ubuntu.com/usn/USN-3001-1nvdThird Party Advisory
- www.ubuntu.com/usn/USN-3002-1nvdThird Party Advisory
- www.ubuntu.com/usn/USN-3003-1nvdThird Party Advisory
- www.ubuntu.com/usn/USN-3004-1nvdThird Party Advisory
- www.ubuntu.com/usn/USN-3021-1nvdThird Party Advisory
- www.ubuntu.com/usn/USN-3021-2nvdThird Party Advisory
- github.com/torvalds/linux/commit/1666984c8625b3db19a9abc298931d35ab7bc64bnvdVendor Advisory
- github.com/torvalds/linux/commit/4d06dd537f95683aba3651098ae288b7cbff8274nvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue Tracking
- lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.htmlnvd
- www.debian.org/security/2016/dsa-3607nvd
- www.openwall.com/lists/oss-security/2016/04/06/4nvd
- www.securityfocus.com/bid/91028nvd
- www.securitytracker.com/id/1036763nvd
- www.spinics.net/lists/netdev/msg367669.htmlnvd
News mentions
0No linked articles in our index yet.