CVE-2017-16525

Name
CVE-2017-16525
Description
The usb_serial_console_disconnect function in drivers/usb/serial/console.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device, related to disconnection and failed setup.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Third Party Advisory http://www.securityfocus.com/bid/102028
Patch https://github.com/torvalds/linux/commit/299d7572e46f98534033a9e65973f13ad1ce9047
Patch https://github.com/torvalds/linux/commit/bd998c2e0df0469707503023d50d46cf0b10c787
Third Party Advisory https://groups.google.com/d/msg/syzkaller/cMACrmo1x0k/4KhRoUgABAAJ
Mailing List https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html
Third Party Advisory https://usn.ubuntu.com/3583-1/
Third Party Advisory https://usn.ubuntu.com/3583-2/

Match rules

CPE URI Source package Min version Max version
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* linux_kernel >= 2.6.18 < 3.2.96
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* linux_kernel >= 3.3 < 3.10.108
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* linux_kernel >= 3.11 < 3.16.51
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* linux_kernel >= 3.17 < 3.18.76
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* linux_kernel >= 3.19 < 4.1.46
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* linux_kernel >= 4.2 < 4.4.93
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* linux_kernel >= 4.5 < 4.9.57
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* linux_kernel >= 4.10 < 4.13.8

Vulnerable and fixed packages

Source package Branch Version Maintainer Status