The usbhid_parse function in drivers/hid/usbhid/hid-core.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSS Details
- CVSS 3.1 Base Score: 6.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 25, 2019 | Nov 3, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-debug | Dec 4, 2017 | Nov 3, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-headersUpgrade perf | Dec 4, 2017 | Nov 3, 2017 |
| Oracle_linux | — | Upgrade kernel-uek | Jan 24, 2018 | Sep 28, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 28, 2017 |
| Suse | — | Upgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-default-manUpgrade kernel-ec2-extraUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2Upgrade ocfs2-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-source-azure | Nov 8, 2018 | Nov 3, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-101-powerpc-smpUpgrade linux-image-4.4.0-101-powerpc64-smpUpgrade linux-image-gkeUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-157-genericUpgrade linux-image-4.4.0-1003-awsUpgrade linux-image-4.13.0-17-lowlatencyUpgrade linux-image-3.13.0-157-powerpc-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-157-powerpc64-embUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc64-smpUpgrade linux-image-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-157-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-101-genericUpgrade linux-image-4.4.0-1041-awsUpgrade linux-image-4.13.0-17-genericUpgrade linux-image-4.4.0-101-generic-lpaeUpgrade linux-image-4.13.0-1006-raspi2Upgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-157-powerpc-e500mcUpgrade linux-image-4.4.0-1034-gkeUpgrade linux-image-4.4.0-101-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-101-powerpc-e500mcUpgrade linux-image-4.4.0-1077-raspi2Upgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-157-powerpc-e500Upgrade linux-image-4.4.0-1079-snapdragonUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.13.0-17-generic-lpaeUpgrade linux-image-3.13.0-157-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-awsUpgrade linux-image-4.4.0-1010-kvmUpgrade linux-image-kvmUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-101-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-157-powerpc64-smp | Nov 21, 2017 | Nov 3, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 4, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub