CVE-2017-16648: Use After Free

The dvbfrontendfree function in drivers/media/dvb-core/dvbfrontend.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service use-after-free and system crash or possibly have unspecified other impact via a crafted USB device. NOTE: the function was later renamed...

UBUNTU-CVE-2017-16645

The imspcugetcdcuniondesc function in drivers/input/misc/ims-pcu.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service imspcuparsecdcdata out-of-bounds read and system crash or possibly have unspecified other impact via a crafted USB device...

CVE-2017-15102

The towerprobe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1 allows local users who are physically proximate for inserting a crafted USB device to gain privileges by leveraging a write-what-where condition that occurs after a race condition and a NULL pointer...

PT-2017-3306

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.13.11 Description The issue is related to the hdpvr probe function in the Linux kernel, which is associated with improper error handling. This can be exploited by a local user via a crafted USB device,...

Linux kernel local denial of service vulnerability (CNVD-2017-33100)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the 'imonprobe' function in the drivers/media/rc/imon.c file in Linux kernel 4.13.11 and earlier versions. A local attacker c...

Linux kernel local denial of service vulnerability (CNVD-2017-33091)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the sound/core/seqdevice.c file in versions of Linux kernel prior to 4.13.4. A local attacker can exploit this vulnerability ...

Linux kernel local denial of service vulnerability (CNVD-2017-33479)

Linux kernel is the kernel used by Linux, an open source operating system released by the Linux Foundation in the U.S. The uas driver is one of the UAS mass storage device drivers. A local denial of service vulnerability exists in the uas driver in versions of Linux kernel prior to 4.13.6. A loca...

PT-2017-3301

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.13.11 Description The issue is related to the qmi wwan bind function in the Linux kernel, which can be exploited by a local user via a crafted USB device. This can cause a denial of service due to a divide-by-ze...

Linux kernel local denial of service vulnerability (CNVD-2017-33099)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the 'imonprobe' function in the drivers/media/rc/imon.c file in Linux kernel 4.13.11 and earlier versions. A local attacker can...

PT-2017-3303

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.13.11 Description The issue is related to the dvb frontend free function, which allows local users to cause a denial of service, potentially leading to a system crash, via a crafted USB device. This is due to a...

Linux kernel local denial of service vulnerability (CNVD-2017-33089)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the drivers/uwb/uwbd.c file in versions of Linux kernel prior to 4.13.6. A local attacker could exploit this vulnerability to...

CVE-2017-16534

The cdcparsecdcheader function in drivers/usb/core/message.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of-bounds read and system crash or possibly have unspecified other impact via a crafted USB device...

CVE-2017-16538

drivers/media/usb/dvb-usb-v2/lmedm04.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service general protection fault and system crash or possibly have unspecified other impact via a crafted USB device, related to a missing warm-start check and incorrect attach timin...

CVE-2017-16536

The cx231xxusbprobe function in drivers/media/usb/cx231xx/cx231xx-cards.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via a crafted USB device...

CVE-2017-16532

The getendpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via a crafted USB device...

CVE-2017-16537

The imonprobe function in drivers/media/rc/imon.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via a crafted USB device...

DEBIAN-CVE-2017-16537

The imonprobe function in drivers/media/rc/imon.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via a crafted USB device...

CVE-2017-16533

The usbhidparse function in drivers/hid/usbhid/hid-core.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service out-of-bounds read and system crash or possibly have unspecified other impact via a crafted USB device...

CVE-2017-16534

The cdcparsecdcheader function in drivers/usb/core/message.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of-bounds read and system crash or possibly have unspecified other impact via a crafted USB device...

CVE-2017-16536

The cx231xxusbprobe function in drivers/media/usb/cx231xx/cx231xx-cards.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via a crafted USB device...