** Changed in: linux-snapdragon (Ubuntu Precise) Status: New => Invalid
** Changed in: linux-snapdragon (Ubuntu Precise) Importance: Undecided => Low ** Changed in: linux-snapdragon (Ubuntu Wily) Status: New => Invalid ** Changed in: linux-snapdragon (Ubuntu Wily) Importance: Undecided => Low ** Changed in: linux-snapdragon (Ubuntu Xenial) Status: New => Fix Committed ** Changed in: linux-snapdragon (Ubuntu Xenial) Importance: Undecided => Low ** Changed in: linux-snapdragon (Ubuntu Yakkety) Importance: Undecided => Low ** Changed in: linux-snapdragon (Ubuntu Trusty) Status: New => Invalid ** Changed in: linux-snapdragon (Ubuntu Trusty) Importance: Undecided => Low ** Description changed: - Kernel crashes on invalid USB device descriptors (cdc_acm driver) + The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux + kernel before 4.5.1 allows physically proximate attackers to cause a + denial of service (NULL pointer dereference and system crash) via a USB + device without both a control and a data endpoint descriptor. Break-Fix: - 8835ba4a39cf53f705417b3b3a94eb067673f2c9 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1556880 Title: CVE-2016-3138 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1556880/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs