CVE-2017-16914: Null Pointer Dereference
Last updated 29 November 2024
Other sources
The "stubsendretsubmit()" function (drivers/usb/usbip/stubtx.c) in the Linux Kernel before version 4.14.8, 4.9.71, 4.1.49, and 4.4.107 allows attackers to cause a denial of service (NULL pointer dereference) via a specially crafted USB over IP packet.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1 - Upgrade
Upgrade
Linux Kernelto a version that resolves this vulnerability.Fixed in 4.14.8 - Upgrade
Upgrade
Linux Kernelto a version that resolves this vulnerability.Fixed in 4.9.71 - Upgrade
Upgrade
Linux Kernelto a version that resolves this vulnerability.Fixed in 4.1.49 - Upgrade
Upgrade
Linux Kernelto a version that resolves this vulnerability.Fixed in 4.4.107
Event History
Frequently Asked Questions
What is CVE-2017-16914?
CVE-2017-16914 is a vulnerability in the Linux Kernel that allows attackers to cause a denial of service (NULL pointer dereference) via a specially crafted USB over IP packet.
How does CVE-2017-16914 affect the Linux Kernel?
CVE-2017-16914 affects the 'stub_send_ret_submit()' function in the Linux Kernel before version 4.14.8, 4.9.71, 4.1.49, and 4.4.107.
What is the severity of CVE-2017-16914?
CVE-2017-16914 has a severity rating of high.
How can I fix CVE-2017-16914?
To fix CVE-2017-16914, update your Linux Kernel to version 4.14.8, 4.9.71, 4.1.49, or 4.4.107.
Where can I find more information about CVE-2017-16914?
You can find more information about CVE-2017-16914 in the following references: [Reference 1](https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.49), [Reference 2](https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8), [Reference 3](https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.107).