CVE-2017-17975

MEDIUM5.5

Use-after-free in the usbtv_probe function in drivers/media/usb/usbtv/usbtv-core

Published Dec 30, 2017

Modified 1 years ago

Details

Use-after-free in the usbtv_probe function in drivers/media/usb/usbtv/usbtv-core.c in the Linux kernel through 4.14.10 allows attackers to cause a denial of service (system crash) or possibly have unspecified other impact by triggering failure of audio registration, because a kfree of the usbtv data structure occurs during a usbtv_video_free call, but the usbtv_video_fail label's code attempts to both access and free this data structure.

References

WEBhttp://linuxtesting.org/pipermail/ldv-project/2017-November/001008.html WEBhttp://www.securityfocus.com/bid/102330 ADVISORYhttps://usn.ubuntu.com/3653-1/ADVISORYhttps://usn.ubuntu.com/3653-2/ADVISORYhttps://usn.ubuntu.com/3654-1/ADVISORYhttps://usn.ubuntu.com/3654-2/ADVISORYhttps://usn.ubuntu.com/3656-1/ADVISORYhttps://usn.ubuntu.com/3657-1/ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2017-17975 ADVISORYhttps://www.debian.org/security/2018/dsa-4188

CVSS Analysis

CVSS v3.0

5.5

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Ecosystems

Timeline

PublishedDec 30, 2017

ModifiedAug 5, 2024