CVE-2016-20022
Published
CVSS v3
8.4
HIGH
CVSS v2
N/A
Affected
1
PROJECT
Description
In the Linux kernel before 4.8, usb_parse_endpoint in drivers/usb/core/config.c does not validate the wMaxPacketSize field of an endpoint descriptor. NOTE: This vulnerability only affects products that are no longer supported by the supplier.
GitHub