The edge_bulk_in_callback function in drivers/usb/serial/io_ti.c in the Linux kernel before 4.10.4 allows local users to obtain sensitive information (in the dmesg ringbuffer and syslog) from uninitialized kernel memory by using a crafted USB device (posing as an io_ti USB serial device) to trigger an integer underflow.
CVSS Details
- CVSS 3.0 Base Score: 4.6
- CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 20, 2017 | May 12, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debugUpgrade python-perfUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools | Nov 30, 2017 | May 12, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-debug-devel | Nov 30, 2017 | May 12, 2017 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 7, 2020 | Mar 6, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 6, 2017 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-ec2Upgrade dlm-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade cluster-network-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-default | Jul 13, 2017 | May 12, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc64-embUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-4.8.0-59-powerpc64-embUpgrade linux-image-3.13.0-125-powerpc64-embUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.8.0-59-powerpc-smpUpgrade linux-image-3.13.0-125-powerpc-e500Upgrade linux-image-4.8.0-59-genericUpgrade linux-image-4.8.0-59-powerpc-e500mcUpgrade linux-image-3.13.0-125-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-4.8.0-59-lowlatencyUpgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-125-genericUpgrade linux-image-3.13.0-125-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-4.8.0-1043-raspi2Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-genericUpgrade linux-image-3.13.0-125-powerpc64-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-3.13.0-125-powerpc-e500mcUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-4.8.0-59-generic-lpaeUpgrade linux-image-3.13.0-125-powerpc-smp | Jul 21, 2017 | May 12, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 12, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub