The parse_hid_report_descriptor function in drivers/input/tablet/gtco.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.
CVSS Details
- CVSS 3.0 Base Score: 6.6
- CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Dec 22, 2017 | Nov 7, 2017 |
| Debian | — | Upgrade linux | Feb 25, 2019 | Nov 7, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade python-perfUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64 | Dec 4, 2017 | Nov 7, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfoUpgrade perf | Dec 8, 2017 | Nov 7, 2017 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 27, 2018 | Oct 24, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 24, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-103-powerpc-e500mcUpgrade linux-image-4.4.0-103-powerpc64-smpUpgrade linux-image-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-103-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-snapdragonUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1012-kvmUpgrade linux-image-powerpc-e500Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-157-powerpc64-embUpgrade linux-image-kvmUpgrade linux-image-3.13.0-157-genericUpgrade linux-image-4.13.0-19-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.13.0-19-genericUpgrade linux-image-3.13.0-157-lowlatencyUpgrade linux-image-4.4.0-1005-awsUpgrade linux-image-4.4.0-103-lowlatencyUpgrade linux-image-4.4.0-1043-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-103-generic-lpaeUpgrade linux-image-4.13.0-19-lowlatencyUpgrade linux-image-3.13.0-157-powerpc-e500Upgrade linux-image-4.4.0-1079-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-157-powerpc-e500mcUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-157-powerpc64-smpUpgrade linux-image-3.13.0-157-generic-lpaeUpgrade linux-image-4.4.0-103-powerpc64-embUpgrade linux-image-4.4.0-103-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-3.13.0-157-powerpc-smpUpgrade linux-image-4.13.0-1008-raspi2Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1081-snapdragon | Dec 8, 2017 | Nov 7, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub