critical
CVE-2016-3955
Kernel: usbip: buffer overflow by trusting length of incoming packets
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat7.0AV:N/AC:M/Au:S/C:N/I:P/A:C
Trivy's own label is CRITICAL. Rated critical by NVD, Photon OS. Rated lower by Red Hat (high), Ubuntu (medium).
Description
The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| Photon OS 1.0 | linux, linux-esx | 4.4.26-1.ph1 |
| debian 11 | linux | 4.5.2-1 |
| debian 12 | linux | 4.5.2-1 |
| debian 13 | linux | 4.5.2-1 |
| debian 14 | linux | 4.5.2-1 |
| debian 7 | linux | 3.2.81-1 |
| debian 8 | linux | 3.16.7-ckt25-2+deb8u2 |
| echo | linux | 4.5.2-1 |
| root.io debian 11 | rootio-linux | 4.5.2-1 |
| root.io debian 12 | rootio-linux | 4.5.2-1 |
| root.io debian 13 | rootio-linux | 4.5.2-1 |
| ubuntu 12.04 | linux, linux-armadaxp, linux-lts-trusty and 1 more | 3.2.0-104.145 and 3 more |
Show all 31 entries from 18 sources
| Source | Package | Fixed in |
|---|---|---|
| Photon OS 1.0 | linux | 4.4.26-1.ph1 |
| Photon OS 1.0 | linux-esx | 4.4.26-1.ph1 |
| debian 11 | linux | 4.5.2-1 |
| debian 12 | linux | 4.5.2-1 |
| debian 13 | linux | 4.5.2-1 |
| debian 14 | linux | 4.5.2-1 |
| debian 7 | linux | 3.2.81-1 |
| debian 8 | linux | 3.16.7-ckt25-2+deb8u2 |
| echo | linux | 4.5.2-1 |
| root.io debian 11 | rootio-linux | 4.5.2-1 |
| root.io debian 12 | rootio-linux | 4.5.2-1 |
| root.io debian 13 | rootio-linux | 4.5.2-1 |
| ubuntu 12.04 | linux | 3.2.0-104.145 |
| ubuntu 12.04 | linux-armadaxp | 3.2.0-1667.92 |
| ubuntu 12.04 | linux-lts-trusty | 3.13.0-88.135~precise1 |
| ubuntu 12.04 | linux-ti-omap4 | 3.2.0-1482.109 |
| ubuntu 12.04-ESM | linux | 3.2.0-104.145 |
| ubuntu 12.04-ESM | linux-lts-trusty | 3.13.0-88.135~precise1 |
| ubuntu 14.04 | linux | 3.13.0-87.133 |
| ubuntu 14.04 | linux-lts-utopic | 3.16.0-73.95~14.04.1 |
| ubuntu 14.04 | linux-lts-vivid | 3.19.0-61.69~14.04.1 |
| ubuntu 14.04 | linux-lts-wily | 4.2.0-38.45~14.04.1 |
| ubuntu 14.04 | linux-lts-xenial | 4.4.0-22.39~14.04.1 |
| ubuntu 14.04-ESM | linux | 3.13.0-87.133 |
| ubuntu 14.04-ESM | linux-lts-xenial | 4.4.0-22.39~14.04.1 |
| ubuntu 15.10 | linux | 4.2.0-38.45 |
| ubuntu 15.10 | linux-raspi2 | 4.2.0-1031.41 |
| ubuntu 16.04 | linux | 4.4.0-22.39 |
| ubuntu 16.04 | linux-raspi2 | 4.4.0-1010.12 |
| ubuntu 16.04 | linux-snapdragon | 4.4.0-1013.14 |
| ubuntu 16.04-ESM | linux | 4.4.0-22.39 |
References
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html
- http://www.debian.org/security/2016/dsa-3607
- http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.3
- http://www.openwall.com/lists/oss-security/2016/04/19/1
- http://www.securityfocus.com/bid/86534
- http://www.ubuntu.com/usn/USN-2989-1
- http://www.ubuntu.com/usn/USN-2996-1
All 34 references
- http://www.ubuntu.com/usn/USN-2997-1
- http://www.ubuntu.com/usn/USN-2998-1
- http://www.ubuntu.com/usn/USN-3000-1
- http://www.ubuntu.com/usn/USN-3001-1
- http://www.ubuntu.com/usn/USN-3002-1
- http://www.ubuntu.com/usn/USN-3003-1
- http://www.ubuntu.com/usn/USN-3004-1
- https://access.redhat.com/security/cve/CVE-2016-3955
- https://bugzilla.redhat.com/show_bug.cgi?id=1328478
- https://git.kernel.org/linus/b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb
- https://github.com/torvalds/linux/commit/b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb
- https://nvd.nist.gov/vuln/detail/CVE-2016-3955
- https://ubuntu.com/security/notices/USN-2965-1
- https://ubuntu.com/security/notices/USN-2965-2
- https://ubuntu.com/security/notices/USN-2965-3
- https://ubuntu.com/security/notices/USN-2965-4
- https://ubuntu.com/security/notices/USN-2989-1
- https://ubuntu.com/security/notices/USN-2996-1
- https://ubuntu.com/security/notices/USN-2997-1
- https://ubuntu.com/security/notices/USN-2998-1
- https://ubuntu.com/security/notices/USN-3000-1
- https://ubuntu.com/security/notices/USN-3001-1
- https://ubuntu.com/security/notices/USN-3002-1
- https://ubuntu.com/security/notices/USN-3003-1
- https://ubuntu.com/security/notices/USN-3004-1
- https://www.cve.org/CVERecord?id=CVE-2016-3955