CVE-2015-8816

MEDIUM

6.8

CVSS Score

Published: April 27, 2016 at 05:00 PM UTC

Updated: June 17, 2026 at 12:35 AM UTC

11 products affected across 3 vendorsLinux KernelLinux Enterprise ServerSUSE Linux Enterprise Server

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.8

Exploit prediction

EPSS 0.5%

Description

The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate attackers to cause a denial of service (invalid memory access and system crash) or possibly have unspecified other impact by unplugging a USB hub device.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

2.6.28 ≤ v < 3.2.763.11 ≤ v < 3.12.583.13 ≤ v < 3.14.763.15 ≤ v < 3.16.353.17 ≤ v < 3.18.273.19 ≤ v < 4.1.173.3 ≤ v < 3.4.1133.5 ≤ v < 3.10.1034.2 ≤ v < 4.3.5

Affected range stops below 3.10.103, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.12.58, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.14.76, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.16.35, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.18.27, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.2.76, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.4.113, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.1.17, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.3.5, so it looks safe — our inference, not a vendor statement

SUSE Linux Enterprise Debuginfo · Novell

95%

11 sp4