CVE-2016-3955

Critical

Published: 03/07/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The usbip_recv_xbuff function in the Linux kernel before version 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet.

Risk Assessment

Attackers may exploit this vulnerability to disrupt system operations, potentially leading to service outages. There is also a risk of unspecified impact on the system.

Recommendation

It is recommended to update the Linux kernel to version 4.5.3 or later to mitigate this vulnerability.

Original NVD description (English source)

The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet.