Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Alexandru Cornea

Pesquisador deIntel
#38328de 53,640
7.2CVSS total
Vulnerabilidades · 1
PT-2016-4034
7.2
2016-01-13
Linux · Linux Kernel · CVE-2015-8816
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 4.3.5 **Description** The issue is related to the `hub activate` function in the Linux kernel, which does not properly maintain a hub-interface data structure. This allows physically proximate attackers to cause a denial of service, resulting in invalid memory access and a system crash, or possibly have other unspecified impacts by unplugging a USB hub device. **Recommendations** For Linux kernel versions prior to 4.3.5, update to version 4.3.5 or later to resolve the issue. As a temporary workaround, consider restricting access to USB hub devices to minimize the risk of exploitation.