Wind River Support Network


LIN6-11500 : Security Advisory - linux - CVE-2016-3955

Created: Jun 29, 2016    Updated: Dec 3, 2018
Resolved Date: Jul 11, 2016
Found In Version: 6.0
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Kernel


Linux kernel built with the USB over IP(CONFIG_USBIP_*) support is vulnerable
to a buffer overflow issue. It could occur while receiving USB/IP packets, when
the size value in the packet is greater actual transfer buffer.

A user/process could use this flaw to crash the remote host via kernel
memory corruption or potentially execute arbitrary code.

Upstream patch:


Other Downloads

Live chat