Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2015-7566 — NULL Pointer Dereference in Kernel

CWE-476 — NULL Pointer Dereference23 documents9 sources
Severity
4.6MEDIUMNVD
EPSS
0.5%
top 36.20%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
5
Linux KernelNovell Suse Linux Enterprise DebuginfoNovell Suse Linux Enterprise Real Time Extension+2 more
Timeline
PublishedFeb 8
Latest updateMay 14

Description

The clie_5_attach function in drivers/usb/serial/visor.c in the Linux kernel through 4.4.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by inserting a USB device that lacks a bulk-out endpoint.

CVSS vector

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 0.9 | Impact: 3.6

Affected Packages6 packages

▶Debianlinux/linux_kernel< 4.3.3-6+3

🔴Vulnerability Details

7
GHSA
GHSA-wg84-xv5x-v36x: The clie_5_attach function in drivers/usb/serial/visor↗2022-05-14
▶
OSV
linux-lts-utopic regression↗2016-04-11
▶
OSV
linux-lts-utopic vulnerabilities↗2016-04-06
▶
OSV
linux-lts-vivid vulnerabilities↗2016-03-14
▶
OSV
linux vulnerabilities↗2016-03-14
▶

💥Exploits & PoCs

1
Exploit-DB
Linux Kernel 3.10.0 (CentOS / RHEL 7.1) - visor clie_5_attach Nullpointer Dereference↗2016-03-09
▶

📋Vendor Advisories

11
Ubuntu
Linux kernel vulnerabilities↗2016-05-09
▶
Ubuntu
Linux kernel (OMAP4) vulnerabilities↗2016-05-09
▶
Ubuntu
Linux kernel (Utopic HWE) vulnerabilities↗2016-04-06
▶
Ubuntu
Linux kernel (Raspberry Pi 2) vulnerabilities↗2016-03-16
▶
Ubuntu
Linux kernel (Wily HWE) vulnerabilities↗2016-03-14
▶

💬Community

3
Bugzilla
CVE-2015-7566 kernel: Crash on invalid USB device descriptors in visor driver [fedora-all]↗2016-01-11
▶
Bugzilla
CVE-2015-7566 kernel: Crash on invalid USB device descriptors in visor driver↗2016-01-07
▶
Bugzilla
CVE-2015-7566 Local RedHat Enterprise Linux DoS – RHEL 7.1 Kernel crashes on invalid USB device descriptors (visor driver) [local-DoS]↗2015-11-18
▶
CVE-2015-7566 — NULL Pointer Dereference in Kernel | cvebase