The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service (out-of-bounds write access) or possibly have unspecified other impact via a crafted USB device.
CVSS Details
- CVSS 3.0 Base Score: 6.6
- CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 12, 2017 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Dec 12, 2017 |
| Debian | — | Upgrade linux | Dec 24, 2017 | Dec 12, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Jan 30, 2018 | Dec 12, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade perfUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-devel | Jan 19, 2018 | Dec 12, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 19, 2018 | Dec 11, 2017 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Apr 11, 2018 | Dec 12, 2017 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-ec2-develUpgrade dlm-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-ec2Upgrade gfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-azure-base | Jan 4, 2018 | Dec 12, 2017 |
| Ubuntu | — | Upgrade linux-image-3.13.0-157-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-157-powerpc-e500mcUpgrade linux-image-4.4.0-1016-awsUpgrade linux-image-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1088-snapdragonUpgrade linux-image-4.4.0-119-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-157-powerpc-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1020-kvmUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.4.0-119-powerpc64-smpUpgrade linux-image-4.4.0-119-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1086-raspi2Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-119-powerpc64-embUpgrade linux-image-4.4.0-119-lowlatencyUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-3.13.0-157-genericUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-157-powerpc-e500Upgrade linux-image-3.13.0-157-powerpc64-embUpgrade linux-image-4.4.0-119-powerpc-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-157-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-4.4.0-119-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-157-generic-lpae | Apr 25, 2018 | Dec 12, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 12, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub