CVE-2017-8071
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
Confidence
High
EPSS
Percentile
5.1%
drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 uses a spinlock without considering that sleeping is possible in a USB HID request callback, which allows local users to cause a denial of service (deadlock) via unspecified vectors.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| linux | linux_kernel | 4.9 | cpe:2.3:o:linux:linux_kernel:4.9:*:*:*:*:*:*:* |
| linux | linux_kernel | 4.9.1 | cpe:2.3:o:linux:linux_kernel:4.9.1:*:*:*:*:*:*:* |
| linux | linux_kernel | 4.9.2 | cpe:2.3:o:linux:linux_kernel:4.9.2:*:*:*:*:*:*:* |
| linux | linux_kernel | 4.9.3 | cpe:2.3:o:linux:linux_kernel:4.9.3:*:*:*:*:*:*:* |
| linux | linux_kernel | 4.9.4 | cpe:2.3:o:linux:linux_kernel:4.9.4:*:*:*:*:*:*:* |
| linux | linux_kernel | 4.9.5 | cpe:2.3:o:linux:linux_kernel:4.9.5:*:*:*:*:*:*:* |
| linux | linux_kernel | 4.9.6 | cpe:2.3:o:linux:linux_kernel:4.9.6:*:*:*:*:*:*:* |
| linux | linux_kernel | 4.9.8 | cpe:2.3:o:linux:linux_kernel:4.9.8:*:*:*:*:*:*:* |
References
www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.9
www.openwall.com/lists/oss-security/2017/04/16/4
www.securityfocus.com/bid/97991
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7a7b5df84b6b4e5d599c7289526eed96541a0654
github.com/torvalds/linux/commit/7a7b5df84b6b4e5d599c7289526eed96541a0654
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
Confidence
High
EPSS
Percentile
5.1%