CVE-2014-3185: Linux Kernel

Medium severity, CVSS 6.9. EPSS: 0.6% chance of exploitation in the next 30 days.

Multiple buffer overflows in the command_port_read_callback function in drivers/usb/serial/whiteheat.c in the Whiteheat USB Serial Driver in the Linux kernel before 3.16.2 allow physically proximate attackers to execute arbitrary code or cause a denial of service (memory corruption and system crash) via a crafted device that provides a large amount of (1) EHCI or (2) XHCI data associated with a bulk response.

Affected products

• Linux Linux Kernel: before 3.2.63 (fixed in 3.2.63); from 3.3, before 3.4.104 (fixed in 3.4.104); from 3.5, before 3.10.54 (fixed in 3.10.54); from 3.11, before 3.12.29 (fixed in 3.12.29); from 3.13, before 3.14.18 (fixed in 3.14.18); from 3.15, before 3.16.2 (fixed in 3.16.2)

Published 2014-09-28. Last modified 2026-06-17.