CVE-2016-2187: Canonical Ubuntu Linux

Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days.

The gtco_probe function in drivers/input/tablet/gtco.c in the Linux kernel through 4.5.2 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 15.10 only; version 16.04 only
• Linux Linux Kernel: up to and including 4.5.2
• Novell Suse Linux Enterprise Debuginfo: version 11 only
• Novell Suse Linux Enterprise Server: version 11 only
• Novell Suse Linux Enterprise Software Development Kit: version 11.0 only

Published 2016-05-02. Last modified 2026-06-17.