CVE-2017-16535 in Kernel
Summary
The usb_get_bos_descriptor function in drivers/usb/core/config.c in the Linux kernel before 4.13.10 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via crafted system calls.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
11/03/2017
Disclosure
11/03/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 109138 | Linux Kernel config.c usb_get_bos_descriptor out-of-bounds | 125 | Not defined | Official fix | CVE-2017-16535 |