drivers/net/usb/asix_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSS Details
- CVSS 3.0 Base Score: 6.6
- CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Dec 22, 2017 | Nov 7, 2017 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 7, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-devel | Dec 11, 2019 | Nov 7, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 10, 2017 |
| Suse | — | Upgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azure | May 20, 2018 | Nov 7, 2017 |
| Ubuntu | — | Upgrade linux-image-4.13.0-38-lowlatencyUpgrade linux-image-oemUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.13.0-1016-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.13.0-38-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-4.13.0-1012-gcpUpgrade linux-image-raspi2Upgrade linux-image-gcpUpgrade linux-image-4.13.0-1022-oemUpgrade linux-image-4.13.0-38-genericUpgrade linux-image-generic-lpae-hwe-16.04 | Apr 25, 2018 | Nov 7, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 7, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub