CVE-2017-17558: High severity Linux Linux Kernel vulnerability
Last updated 29 November 2024
Other sources
The usbdestroyconfiguration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service (out-of-bounds write access) or possibly have unspecified other impact via a crafted USB device.
— Launchpad
The usbdestroyconfiguration() function in 'drivers/usb/core/config.c' in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service (due to out-of-bounds write access) or possibly have unspecified other impact via a crafted USB device. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is unlikely.
References:
http://seclists.org/oss-sec/2017/q4/392
https://www.spinics.net/lists/linux-usb/msg163644.html
https://marc.info/?t=151302896700010&r=1&w=2 (a whole thread)
https://www.spinics.net/lists/linux-usb/msg163693.html
https://marc.info/?t=151310689000001&r=1&w=2 (a whole thread)
An upstream patch:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=48a4ff1c7bb5a32d
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2017-17558.
What is the severity of CVE-2017-17558?
CVE-2017-17558 has a severity value of 7, which is considered high.
Which software is affected by CVE-2017-17558?
The Linux kernel versions up to 4.14.5 are affected by CVE-2017-17558.
How can local users exploit CVE-2017-17558?
Local users can exploit CVE-2017-17558 to cause a denial of service by exploiting a flaw in the usb_destroy_configuration function in the USB core subsystem.
Is there a fix available for CVE-2017-17558?
Yes, the fix for CVE-2017-17558 is available in Linux kernel version 4.15~ and later.