The edge_bulk_in_callback function in drivers/usb/serial/io_ti.c in the Linux kernel before 4.10.4 allows local users to obtain sensitive information (in the dmesg ringbuffer and syslog) from uninitialized kernel memory by using a crafted USB device (posing as an io_ti USB serial device) to trigger an integer underflow.
CVSS Details
- CVSS 3.0 Base Score: 4.6
- CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 20, 2017 | May 12, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-headersUpgrade python-perfUpgrade perf | Nov 30, 2017 | May 12, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64 | Nov 30, 2017 | May 12, 2017 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 7, 2020 | Mar 6, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 6, 2017 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2Upgrade kernel-ec2-devel | Jul 13, 2017 | May 12, 2017 |
| Ubuntu | — | Upgrade linux-image-3.13.0-125-powerpc-e500mcUpgrade linux-image-3.13.0-125-powerpc-smpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.13.0-125-generic-lpaeUpgrade linux-image-3.13.0-125-powerpc64-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.8.0-59-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.8.0-1043-raspi2Upgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lts-trustyUpgrade linux-image-4.8.0-59-powerpc64-embUpgrade linux-image-3.13.0-125-powerpc64-embUpgrade linux-image-3.13.0-125-lowlatencyUpgrade linux-image-4.8.0-59-lowlatencyUpgrade linux-image-4.8.0-59-powerpc-e500mcUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.8.0-59-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-125-genericUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-4.8.0-59-powerpc-smpUpgrade linux-image-3.13.0-125-powerpc-e500Upgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-powerpc64-emb | Jul 21, 2017 | May 12, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 12, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub