Debian/linux: high 8.4
In the Linux kernel before 4.8, usb_parse_endpoint in drivers/usb/core/config.c does not validate the wMaxPacketSize field of an endpoint descriptor. NOTE: This vulnerability only affects products tha
Action: Upgrade linux to 4.7.4-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.7.4-1 | - |
Fixed versions
| 4.7.4-1 |
Sources
- osv: DEBIAN-CVE-2016-20022#Debian:14/linux
- https://security-tracker.debian.org/tracker/CVE-2016-20022
published · modified · JSON