imPC@ndo IT

Tracker / CVE-2017-16914

CVE-2017-16914

Medium 5.9

The "stub_send_ret_submit()" function (drivers/usb/usbip/stub_tx.c) in the Linux Kernel before version 4.14.8, 4.9.71, 4.1.49, and 4.4.107 allows attackers to cause a denial of service (NULL pointer dereference) via a specially crafted USB over IP packet.

Affected products and versions

linux linux_kernel · 4.1.0 → 4.1.49
linux linux_kernel · 4.14.0 → 4.14.8
linux linux_kernel · 4.4.0 → 4.4.107
linux linux_kernel · 4.9.0 → 4.9.71

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References