CVE-2015-5257: drivers/usb/serial/whiteheat.c in the Linux kernel before 4.2.4 allows physically proximate attackers to ca...

Security readout for executives and security teams

CVE-2015-5257 is a Linux kernel USB serial driver flaw. A malicious USB device connected locally could crash the system, causing downtime. The sources identify Linux kernels before 4.2.4 and distribution advisories, but do not provide CVSS scoring or confirmed active exploitation. Exposure is mainly systems running vulnerable Linux kernels with physical USB access available to an attacker. Server exposure is lower where USB ports are controlled or inaccessible. Desktops, labs, kiosks, and embedded systems with reachable USB ports are more relevant. Treat this as a targeted physical-access denial-of-service risk, not an internet-scale emergency. Prioritize patching exposed workstations, kiosks, embedded Linux systems, and sensitive servers with accessible USB ports. Mitigation focus: Update to a kernel containing the upstream fix, such as 4.2.4 or vendor backports.; Apply Debian, Ubuntu, Red Hat, or other distribution security updates where applicable.; Restrict physical access to USB ports on sensitive systems..

Prepared

Jun 13, 2026, 21:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.