The get_endpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSS Details
- CVSS 3.1 Base Score: 6.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 25, 2019 | Nov 3, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debug | Dec 4, 2017 | Nov 3, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Dec 4, 2017 | Nov 3, 2017 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 19, 2018 | Sep 29, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 29, 2017 |
| Ubuntu | — | Upgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-4.4.0-1020-kvmUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-119-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-4.13.0-38-generic-lpaeUpgrade linux-image-3.13.0-157-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-genericUpgrade linux-image-awsUpgrade linux-image-4.4.0-119-powerpc-smpUpgrade linux-image-3.13.0-157-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1086-raspi2Upgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-119-powerpc-e500mcUpgrade linux-image-lowlatencyUpgrade linux-image-4.13.0-38-lowlatencyUpgrade linux-image-3.13.0-157-powerpc64-embUpgrade linux-image-4.4.0-119-powerpc64-embUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.13.0-1016-raspi2Upgrade linux-image-3.13.0-157-lowlatencyUpgrade linux-image-3.13.0-157-powerpc-e500Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.13.0-1012-gcpUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1088-snapdragonUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-3.13.0-157-generic-lpaeUpgrade linux-image-4.4.0-119-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-119-lowlatencyUpgrade linux-image-3.13.0-157-powerpc-smpUpgrade linux-image-4.13.0-1022-oemUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-157-powerpc-e500mcUpgrade linux-image-4.13.0-38-genericUpgrade linux-image-4.4.0-119-powerpc64-smpUpgrade linux-image-4.4.0-1016-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenial | Apr 25, 2018 | Nov 3, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 4, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub