The disconnect method in the Philips USB Webcam (pwc) driver in Linux kernel 2.6.x before 2.6.22.6 "relies on user space to close the device," which allows user-assisted local attackers to cause a denial of service (USB subsystem hang and CPU consumption in khubd) by not closing the device after the disconnect is invoked. NOTE: this rarely crosses privilege boundaries, unless the attacker can convince the victim to unplug the affected device.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-xenU-develUpgrade kernel-xenUUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-smpUpgrade kernel-xenUpgrade kernel-smp-develUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-PAE-develUpgrade kernelUpgrade kernel-hugemem-develUpgrade kernel-PAEUpgrade kernel-hugememUpgrade kernel-doc | Dec 1, 2016 | Sep 26, 2007 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 26, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.17-12-itaniumUpgrade linux-image-2.6.22-14-virtualUpgrade linux-image-2.6.22-14-hppa64Upgrade linux-image-2.6.15-51-hppa64Upgrade linux-image-2.6.22-14-sparc64Upgrade linux-image-2.6.20-16-hppa64Upgrade linux-image-2.6.22-14-xenUpgrade linux-image-2.6.17-12-sparc64-smpUpgrade linux-image-2.6.20-16-powerpcUpgrade linux-image-2.6.15-51-amd64-xeonUpgrade linux-image-2.6.22-14-lpiaUpgrade linux-image-2.6.15-51-powerpc64-smpUpgrade linux-image-2.6.17-12-mckinleyUpgrade linux-image-2.6.15-51-hppa32-smpUpgrade linux-image-2.6.15-51-amd64-k8Upgrade linux-image-2.6.17-12-powerpcUpgrade linux-image-2.6.22-14-mckinleyUpgrade linux-image-2.6.20-16-powerpc-smpUpgrade linux-image-2.6.17-12-sparc64Upgrade linux-image-2.6.17-12-powerpc-smpUpgrade linux-image-2.6.15-51-itaniumUpgrade linux-image-2.6.15-51-sparc64Upgrade linux-image-2.6.17-12-hppa64Upgrade linux-image-2.6.15-51-serverUpgrade linux-image-2.6.15-51-k7Upgrade linux-image-2.6.22-14-powerpcUpgrade linux-image-2.6.20-16-lowlatencyUpgrade linux-image-2.6.15-51-386Upgrade linux-image-2.6.17-12-hppa32Upgrade linux-image-2.6.15-51-amd64-serverUpgrade linux-image-2.6.22-14-386Upgrade linux-image-2.6.17-12-386Upgrade linux-image-2.6.22-14-rtUpgrade linux-image-2.6.20-16-serverUpgrade linux-image-2.6.17-12-genericUpgrade linux-image-2.6.17-12-powerpc64-smpUpgrade linux-image-2.6.15-51-powerpc-smpUpgrade linux-image-2.6.15-51-server-bigironUpgrade linux-image-2.6.22-14-lpiacompatUpgrade linux-image-2.6.22-14-hppa32Upgrade linux-image-2.6.20-16-mckinleyUpgrade linux-image-2.6.15-51-686Upgrade linux-image-2.6.20-16-sparc64-smpUpgrade linux-image-2.6.20-16-386Upgrade linux-image-2.6.17-12-server-bigironUpgrade linux-image-2.6.20-16-genericUpgrade linux-image-2.6.20-16-sparc64Upgrade linux-image-2.6.22-14-sparc64-smpUpgrade linux-image-2.6.22-14-itaniumUpgrade linux-image-2.6.15-51-sparc64-smpUpgrade linux-image-2.6.22-14-powerpc-smpUpgrade linux-image-2.6.22-14-serverUpgrade linux-image-2.6.20-16-itaniumUpgrade linux-image-2.6.15-51-mckinleyUpgrade linux-image-2.6.22-14-cellUpgrade linux-image-2.6.20-16-hppa32Upgrade linux-image-2.6.20-16-server-bigironUpgrade linux-image-2.6.15-51-mckinley-smpUpgrade linux-image-2.6.15-51-amd64-genericUpgrade linux-image-2.6.15-51-hppa32Upgrade linux-image-2.6.15-51-itanium-smpUpgrade linux-image-2.6.17-12-serverUpgrade linux-image-2.6.22-14-umeUpgrade linux-image-2.6.22-14-genericUpgrade linux-image-2.6.15-51-powerpcUpgrade linux-image-2.6.15-51-hppa64-smpUpgrade linux-image-2.6.22-14-powerpc64-smpUpgrade linux-image-2.6.20-16-powerpc64-smp | Nov 8, 2024 | Sep 26, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub