CVE-2016-3689: The ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows...

Security readout for executives and security teams

CVE-2016-3689 is a Linux kernel denial-of-service issue. A person with physical access could plug in a specially malformed USB device and crash an affected system. This is most relevant to workstations, kiosks, lab systems, or servers where USB ports are reachable. Exposure requires physical proximity and an affected Linux kernel or vendor backport state. Internet-facing systems are not directly exposed unless an attacker can access USB hardware. Prioritize where physical USB access is realistic and outages matter. This is not a remote network threat, but it can disrupt endpoints or appliances exposed to untrusted users. Mitigation focus: Apply kernel updates from the relevant Linux distribution vendor.; Use a kernel containing the upstream fix included before or at 4.5.1.; Restrict physical access to USB ports on sensitive systems..

Prepared

Jun 13, 2026, 20:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.