CVE-2017-16533: Medium severity Google Android vulnerability
Last updated 29 November 2024
Other sources
The usbhidparse function in drivers/hid/usbhid/hid-core.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.128-1Fixed in 6.12.21-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 4.13.8
Event History
Frequently Asked Questions
What is the severity of CVE-2017-16533?
The CVE-2017-16533 vulnerability has been classified as a denial of service risk that can cause crashes in affected systems.
How do I fix CVE-2017-16533?
To fix CVE-2017-16533, you should upgrade the Linux kernel to version 4.13.8 or later.
Which Linux distributions are affected by CVE-2017-16533?
CVE-2017-16533 affects several Linux distributions including versions of Linux kernel prior to 4.13.8.
What types of attacks can CVE-2017-16533 facilitate?
CVE-2017-16533 may allow local users to execute attacks that lead to denial of service through crafted USB devices.
Is CVE-2017-16533 exploitable remotely?
CVE-2017-16533 is not a remote vulnerability; it requires local user access to exploit.