The disconnect method in the Philips USB Webcam (pwc) driver in Linux kernel 2.6.x before 2.6.22.6 "relies on user space to close the device," which allows user-assisted local attackers to cause a denial of service (USB subsystem hang and CPU consumption in khubd) by not closing the device after the disconnect is invoked. NOTE: this rarely crosses privilege boundaries, unless the attacker can convince the victim to unplug the affected device.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-hugemem-develUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-xenU-develUpgrade kernel-PAE-develUpgrade kernel-xenUUpgrade kernelUpgrade kernel-headersUpgrade kernel-hugememUpgrade kernel-smpUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-smp-develUpgrade kernel-PAEUpgrade kernel-docUpgrade kernel-debug-devel | Dec 1, 2016 | Sep 26, 2007 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 26, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.17-12-hppa32Upgrade linux-image-2.6.22-14-powerpcUpgrade linux-image-2.6.22-14-386Upgrade linux-image-2.6.22-14-rtUpgrade linux-image-2.6.15-51-hppa32-smpUpgrade linux-image-2.6.22-14-hppa64Upgrade linux-image-2.6.15-51-386Upgrade linux-image-2.6.17-12-386Upgrade linux-image-2.6.20-16-lowlatencyUpgrade linux-image-2.6.22-14-sparc64Upgrade linux-image-2.6.15-51-itaniumUpgrade linux-image-2.6.20-16-powerpc-smpUpgrade linux-image-2.6.20-16-powerpcUpgrade linux-image-2.6.20-16-hppa64Upgrade linux-image-2.6.15-51-k7Upgrade linux-image-2.6.22-14-xenUpgrade linux-image-2.6.15-51-sparc64Upgrade linux-image-2.6.20-16-serverUpgrade linux-image-2.6.17-12-genericUpgrade linux-image-2.6.22-14-virtualUpgrade linux-image-2.6.15-51-hppa64Upgrade linux-image-2.6.15-51-powerpc64-smpUpgrade linux-image-2.6.17-12-sparc64Upgrade linux-image-2.6.17-12-powerpcUpgrade linux-image-2.6.15-51-amd64-k8Upgrade linux-image-2.6.17-12-powerpc64-smpUpgrade linux-image-2.6.17-12-hppa64Upgrade linux-image-2.6.22-14-lpiaUpgrade linux-image-2.6.17-12-sparc64-smpUpgrade linux-image-2.6.15-51-amd64-serverUpgrade linux-image-2.6.15-51-amd64-xeonUpgrade linux-image-2.6.17-12-itaniumUpgrade linux-image-2.6.17-12-mckinleyUpgrade linux-image-2.6.22-14-mckinleyUpgrade linux-image-2.6.17-12-powerpc-smpUpgrade linux-image-2.6.15-51-serverUpgrade linux-image-2.6.15-51-hppa64-smpUpgrade linux-image-2.6.17-12-serverUpgrade linux-image-2.6.20-16-genericUpgrade linux-image-2.6.22-14-genericUpgrade linux-image-2.6.22-14-itaniumUpgrade linux-image-2.6.20-16-powerpc64-smpUpgrade linux-image-2.6.20-16-hppa32Upgrade linux-image-2.6.15-51-powerpcUpgrade linux-image-2.6.20-16-mckinleyUpgrade linux-image-2.6.22-14-powerpc-smpUpgrade linux-image-2.6.15-51-hppa32Upgrade linux-image-2.6.20-16-sparc64Upgrade linux-image-2.6.22-14-cellUpgrade linux-image-2.6.15-51-mckinley-smpUpgrade linux-image-2.6.15-51-powerpc-smpUpgrade linux-image-2.6.22-14-umeUpgrade linux-image-2.6.17-12-server-bigironUpgrade linux-image-2.6.20-16-sparc64-smpUpgrade linux-image-2.6.15-51-mckinleyUpgrade linux-image-2.6.22-14-powerpc64-smpUpgrade linux-image-2.6.22-14-hppa32Upgrade linux-image-2.6.20-16-server-bigironUpgrade linux-image-2.6.20-16-itaniumUpgrade linux-image-2.6.22-14-lpiacompatUpgrade linux-image-2.6.20-16-386Upgrade linux-image-2.6.15-51-686Upgrade linux-image-2.6.15-51-server-bigironUpgrade linux-image-2.6.15-51-sparc64-smpUpgrade linux-image-2.6.22-14-sparc64-smpUpgrade linux-image-2.6.15-51-amd64-genericUpgrade linux-image-2.6.22-14-serverUpgrade linux-image-2.6.15-51-itanium-smp | Nov 8, 2024 | Sep 26, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub