The usbnet_generic_cdc_bind function in drivers/net/usb/cdc_ether.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (divide-by-zero error and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSS Details
- CVSS 3.0 Base Score: 6.6
- CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Dec 22, 2017 | Nov 7, 2017 |
| Debian | — | Upgrade linux | Feb 25, 2019 | Nov 7, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debug | Dec 4, 2017 | Nov 7, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade perf | Dec 8, 2017 | Nov 7, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel-uek-develUpgrade dtrace-modulesUpgrade kernel-uek-firmwareUpgrade kernel-uek-debugUpgrade kernel-uek-debug-develUpgrade kernel-uek-doc | Apr 19, 2018 | Nov 7, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 6, 2017 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-ec2Upgrade kernel-source-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-default-manUpgrade kernel-ec2-extraUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-default | Dec 4, 2017 | Nov 7, 2017 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-3.13.0-162-powerpc-e500mcUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-162-powerpc64-embUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.13.0-1016-raspi2Upgrade linux-image-4.4.0-119-powerpc-smpUpgrade linux-image-4.4.0-119-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-162-generic-lpaeUpgrade linux-image-4.13.0-38-lowlatencyUpgrade linux-image-4.13.0-38-generic-lpaeUpgrade linux-image-4.4.0-119-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1020-kvmUpgrade linux-image-4.13.0-38-genericUpgrade linux-image-4.4.0-119-powerpc-e500mcUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-162-lowlatencyUpgrade linux-image-4.4.0-1086-raspi2Upgrade linux-image-4.4.0-119-powerpc64-embUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.13.0-162-genericUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-3.13.0-162-powerpc-e500Upgrade linux-image-awsUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-119-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-powerpc64-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1016-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.13.0-1012-gcpUpgrade linux-image-3.13.0-162-powerpc64-smpUpgrade linux-image-4.4.0-1088-snapdragonUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-162-powerpc-smpUpgrade linux-image-4.4.0-119-powerpc64-smpUpgrade linux-image-kvmUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.13.0-1022-oemUpgrade linux-image-oem | Apr 25, 2018 | Nov 7, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 7, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub