CVE-2015-7833

Name of the Vulnerable Software and Affected Versions Linux kernel package versions 3.10.0-123.20.1.el7 through 3.10.0-229.14.1.el7 in Red Hat Enterprise Linux (RHEL) 7.1

Description The issue is related to errors in the code of the usbvision driver in the Linux kernel. It allows an attacker with physical access to cause a denial of service (panic) by setting a nonzero bInterfaceNumber value in a USB device descriptor.

Recommendations For Linux kernel package versions 3.10.0-123.20.1.el7 through 3.10.0-229.14.1.el7, consider restricting access to USB devices to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.