drivers/net/usb/asix_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSS Details
- CVSS 3.0 Base Score: 6.6
- CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Dec 22, 2017 | Nov 7, 2017 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 7, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-devel | Dec 11, 2019 | Nov 7, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 10, 2017 |
| Suse | — | Upgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-default-extra | May 20, 2018 | Nov 7, 2017 |
| Ubuntu | — | Upgrade linux-image-4.13.0-38-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.13.0-38-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.13.0-1016-raspi2Upgrade linux-image-oemUpgrade linux-image-4.13.0-1012-gcpUpgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.13.0-38-genericUpgrade linux-image-4.13.0-1022-oemUpgrade linux-image-raspi2Upgrade linux-image-gcp | Apr 25, 2018 | Nov 7, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 7, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub