The aiptek_probe function in drivers/input/tablet/aiptek.c in the Linux kernel before 4.4 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted USB device that lacks endpoints.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Linux_kernel | Linux | * | 4.4 (excluding) |
| Linux_kernel | Linux | 4.4-rc1 (including) | 4.4-rc1 (including) |
| Linux_kernel | Linux | 4.4-rc2 (including) | 4.4-rc2 (including) |
| Linux_kernel | Linux | 4.4-rc3 (including) | 4.4-rc3 (including) |
| Linux_kernel | Linux | 4.4-rc4 (including) | 4.4-rc4 (including) |
| Linux_kernel | Linux | 4.4-rc5 (including) | 4.4-rc5 (including) |
| Linux_kernel | Linux | 4.4-rc6 (including) | 4.4-rc6 (including) |
| Linux_kernel | Linux | 4.4-rc7 (including) | 4.4-rc7 (including) |
| Linux_kernel | Linux | 4.4-rc8 (including) | 4.4-rc8 (including) |