NetSight
IP …
medium6.6

CVE-2017-16531

drivers/usb/core/config.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly h…

Impact

drivers/usb/core/config.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device, related to the USB_DT_INTERFACE_ASSOCIATION descriptor.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.95
from 3.3 before 3.16.75
from 3.17 before 3.18.75
from 3.19 before 4.1.46
from 4.2 before 4.4.92
from 4.5 before 4.9.55

Weakness classification

CWE-119

References