vendor:
RHEL 7.1
by:
Sergej Schumilo, Hendrik Schwartke, Ralf Spenneberg
9
CVSS
CRITICAL
Wrong input validation
20
CWE
Product Name: RHEL 7.1
Affected Version From: RHEL 7.1
Affected Version To: RHEL 7.1
Patch Exists: NO
Related CWE: not yet assigned
CPE: o:redhat:enterprise_linux:7.1
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Linux
2016
Local RedHat Enterprise Linux DoS â?? RHEL 7.1 Kernel crashes on invalid USB device descriptors (cdc_acm driver)
The Kernel 3.10.0-229.20.1.el7.x86_64 crashes on presentation of a buggy USB device requiring the cdc_acm driver. The bug was found using the USB-fuzzing framework vUSBf from Sergej Schumilo (github.com/schumilo) using the following device descriptor. This is the configuration descriptor containing only one interface descriptor. The cdc-acm driver assumes that there will be at least two interface- descriptors with associated endpoint-descriptors. Since the cdc-acm driver is expecting a second interface descriptor, the driver tries to dereference a null-pointer. This results in a crash of the system.
Mitigation:
No mitigation available
