The usb_serial_console_disconnect function in drivers/usb/serial/console.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device, related to disconnection and failed setup.
CVSS Details
- CVSS 3.1 Base Score: 6.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 25, 2019 | Nov 3, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-tools-libs | Dec 4, 2017 | Nov 3, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Dec 4, 2017 | Nov 3, 2017 |
| Oracle_linux | — | Upgrade kernel-uek | Jan 24, 2018 | Oct 4, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 4, 2017 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade kernel-ec2Upgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-ec2-develUpgrade kernel-default-extraUpgrade cluster-md-kmp-default | Dec 4, 2017 | Nov 3, 2017 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-4.4.0-1034-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-142-genericUpgrade linux-image-4.4.0-101-generic-lpaeUpgrade linux-image-4.4.0-101-powerpc-smpUpgrade linux-image-4.4.0-101-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.13.0-17-lowlatencyUpgrade linux-image-4.4.0-1041-awsUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-genericUpgrade linux-image-4.4.0-1003-awsUpgrade linux-image-4.4.0-1077-raspi2Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-1079-snapdragonUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.4.0-101-genericUpgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-4.13.0-17-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-101-lowlatencyUpgrade linux-image-4.4.0-1010-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-101-powerpc64-embUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-4.4.0-101-powerpc-e500mcUpgrade linux-image-awsUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-4.13.0-1006-raspi2Upgrade linux-image-4.13.0-17-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lts-trusty | Nov 21, 2017 | Nov 3, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 4, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub