CVE-2017-7273: Medium severity Linux Linux kernel vulnerability
Last updated 4 October 2024
Other sources
The cpreportfixup function in drivers/hid/hid-cypress.c in the Linux kernel 3.2 and 4.x before 4.9.4 allows physically proximate attackers to cause a denial of service (integer underflow) or possibly have unspecified other impact via a crafted HID report.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1 - Upgrade
Upgrade
Linux kernel (drivers/hid/hid-cypress.c)to a version that resolves this vulnerability.Fixed in 4.9.4
Event History
Frequently Asked Questions
What is the vulnerability ID for the Linux kernel integer underflow vulnerability?
The vulnerability ID for the Linux kernel integer underflow vulnerability is CVE-2017-7273.
What is the impact of the Linux kernel integer underflow vulnerability?
The Linux kernel integer underflow vulnerability can cause a denial of service or possibly have unspecified other impact.
Which versions of the Linux kernel are affected by CVE-2017-7273?
The Linux kernel versions 3.2 and 4.x before 4.9.4 are affected by CVE-2017-7273.
How can a physically proximate attacker exploit the Linux kernel integer underflow vulnerability?
A physically proximate attacker can exploit the Linux kernel integer underflow vulnerability by crafting a malicious HID report.
How can I fix the Linux kernel integer underflow vulnerability?
To fix the Linux kernel integer underflow vulnerability, update the kernel to version 4.10 or later.