CVE-2017-16648 in Linux Kernel
Summary
The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device. NOTE: the function was later renamed __dvb_frontend_free.
Reservation
11/07/2017
Disclosure
11/07/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 109193 | Linux Kernel USB Device dvb_frontend.c dvb_frontend_free use after free | 416 | Not defined | Official fix | CVE-2017-16648 |