Vulnetix
Try Vulnetix Request Demo
CVE-2017-17975 PUBLISHED

Use-after-free in the usbtv_probe function in drivers/media/usb/usbtv/usbtv-core.c in the Linux kernel through 4.14.10 allows attackers to cause a denial of service (system crash) or possibly have unspecified other impact by triggering failure of audio registration, because a kfree of the usbtv data structure occurs during a usbtv_video_free call, but the usbtv_video_fail label's code attempts to both access and free this data structure.

EPSS 0.05% · 14.4th percentile

Risk Scores

EPSS Score
0.05%
14.4th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlinux-oem4.13.0-1015.16, 4.13.0-1012.13, 4.13.0-1010.11
Ubuntu:22.04:LTSlinux-realtime5.15.0-1032.35, 0
Ubuntu:16.04:LTSlinux4.4.0-122.146, 4.4.0-121.145, 4.4.0-119.143
Ubuntu:14.04:LTSlinux-aws4.4.0-1010.10, 4.4.0-1019.19, 4.4.0-1017.17
Ubuntu:Pro:FIPS:16.04:LTSlinux-fips4.4.0-1005.5, 4.4.0-1003.3, 0
Ubuntu:16.04:LTSlinux-snapdragon4.4.0-1071.76, 4.4.0-1069.74, 4.4.0-1067.72
Ubuntu:16.04:LTSlinux-gcp4.13.0-1015.19, 4.13.0-1013.17, 4.13.0-1012.16
Ubuntu:14.04:LTSlinux-lts-xenial0, 4.4.0-13.29~14.04.1, 4.4.0-14.30~14.04.2
Ubuntu:20.04:LTSlinux-gke5.4.0-1043.45, 5.4.0-1044.46, 5.4.0-1046.48
Ubuntu:16.04:LTSlinux-raspi24.4.0-1052.59, 0, 4.2.0-1013.19
Ubuntu:22.04:LTSlinux-intel-iot-realtime0, 5.15.0-1073.75
Ubuntu:20.04:LTSlinux-riscv5.4.0-26.30, 5.4.0-27.31, 5.4.0-28.32
Ubuntu:16.04:LTSlinux-kvm4.4.0-1013.18, 0, 4.4.0-1004.9
Ubuntu:16.04:LTSlinux-aws4.4.0-1055.64, 4.4.0-1011.20, 4.4.0-1012.21
Ubuntu:22.04:LTSlinux-riscv0, 5.15.0-1028.32, 5.15.0-1027.31
Ubuntu:24.04:LTSlinux-raspi-realtime6.8.0-2019.20, 0
Ubuntu:16.04:LTSlinux-azure4.11.0-1013.13, 4.13.0-1016.19, 4.13.0-1014.17
Ubuntu:16.04:LTSlinux-hwe4.10.0-27.30~16.04.2, 0, 4.8.0-36.36~16.04.1
Ubuntu:20.04:LTSlinux-raspi25.3.0-1014.16, 5.3.0-1015.17, 5.3.0-1017.19
Ubuntu:20.04:LTSlinux-azure-fde5.4.0-1080.83+cvm1.1, 5.4.0-1078.81+cvm1.1, 5.4.0-1076.79+cvm1.1

Timeline

References

Open in Interactive Console →