CVE-2017-16532: Null Pointer Dereference
Published Nov 4, 2017
·Updated
Last updated 29 November 2024
Other sources
The getendpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.
Affected Software
13 affected componentsFixes available
Linux Linux kernel<=4.13.11
Linux Linux kernel<3.2.95
Linux Linux kernel>=3.3<3.16.50
Linux Linux kernel>=3.17<3.18.82
Linux Linux kernel>=3.19<4.1.47
Linux Linux kernel>=4.2<4.4.99
Linux Linux kernel>=4.5<4.9.63
Linux Linux kernel>=4.10<4.13.14
Debian Debian Linux=7.0
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=17.10
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.22-16.12.25-1
Remediation
Event History
Nov 4, 2017
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:32 PM
Description
Dec 1, 2024
Data Sourced
via Ubuntu·01:57 AM
RemedyDescriptionSeverityAffected Software
Mar 27, 2025
Data Sourced
via Debian·03:43 AM
DescriptionAffected Software