Skip to content
OpenAdvisories
Unscored CVE-2016-5400 EUVD-2016-6345GHSA-m677-x4w4-vj2w

Memory leak in the airspy_probe function in drivers/media/usb/airspy/airspy.c in the airspy USB driver in the Linux kernel before 4.7 allow…

Published Aug 6, 2016 · Updated Aug 6, 2024 · Assigned by redhat

Package: linux Package: linux Package: linux-lts-vivid Package: linux-lts-xenial Package: linux-raspi2 Package: linux-snapdragon Ecosystem: Debian Ecosystem: Ubuntu

Description

Memory leak in the airspy_probe function in drivers/media/usb/airspy/airspy.c in the airspy USB driver in the Linux kernel before 4.7 allows local users to cause a denial of service (memory consumption) via a crafted USB device that emulates many VFL_TYPE_SDR or VFL_TYPE_SUBDEV devices and performs many connect and disconnect operations.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 linux 4.7.2-1 —
Debian 13 linux 4.7.2-1 —
Debian 12 linux 4.7.2-1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS linux 4.4.0-36.55 USN-3070-1
Ubuntu 16.04 LTS linux-raspi2 4.4.0-1021.27 USN-3070-2
Ubuntu 16.04 LTS linux-snapdragon 4.4.0-1024.27 USN-3070-3
Ubuntu 14.04 LTS linux-lts-vivid 3.19.0-68.76~14.04.1 —
Ubuntu 14.04 LTS linux-lts-xenial 4.4.0-36.55~14.04.1 USN-3070-4

Advisories 4

References