CVE-2016-2384

MEDIUM

Linux Kernel < 4.4.8 - Denial of Service

Title source: rule

Description

Double free vulnerability in the snd_usbmidi_create function in sound/usb/midi.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (panic) or possibly have unspecified other impact via vectors involving an invalid USB descriptor.

Exploits (2)

github WORKING POC 8 stars
by codecat007 · cpoc
https://github.com/codecat007/cvehub/tree/main/android/kernel/EXP-CVE-2016-2384
exploitdb WORKING POC
by Andrey Konovalov · textlocallinux
https://www.exploit-db.com/exploits/41999

References (38)

... and 18 more

Scores

CVSS v3 4.6
EPSS 0.0898
EPSS Percentile 92.5%
Attack Vector PHYSICAL
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

Status draft

Affected Products (2)

linux/linux_kernel < 4.4.8
novell/suse_linux_enterprise_real_time_extension

Timeline

Published Apr 27, 2016
Tracked Since Feb 18, 2026