CVE-2017-18079 PUBLISHED

drivers/input/serio/i8042.c in the Linux kernel before 4.12.4 allows attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact because the port->exists value can change after it is validated.

EPSS 0.07% · 22.2th percentile

Risk Scores

EPSS Score
0.07%
22.2th percentile

Affected Products

VendorProductVersions
Ubuntu:24.04:LTSlinux-raspi-realtime6.8.0-2019.20, 0
Ubuntu:14.04:LTSlinux-lts-xenial4.4.0-63.84~14.04.2, 4.4.0-64.85~14.04.1, 4.4.0-66.87~14.04.1
Ubuntu:22.04:LTSlinux-riscv5.13.0-1007.7+22.04.1, 5.13.0-1006.6+22.04.1, 5.13.0-1004.4
Ubuntu:20.04:LTSlinux-gke5.4.0-1072.77, 5.4.0-1068.71, 5.4.0-1067.70
Ubuntu:16.04:LTSlinux-raspi24.4.0-1027.33, 4.4.0-1023.29, 4.4.0-1021.27
Ubuntu:14.04:LTSlinux3.13.0-137.186, 3.11.0-12.19, 3.12.0-1.3
Ubuntu:16.04:LTSlinux-azure4.11.0-1016.16, 0, 4.11.0-1009.9
Ubuntu:20.04:LTSlinux-raspi25.4.0-1006.6, 5.4.0-1004.4, 5.3.0-1017.19
Ubuntu:16.04:LTSlinux-hwe4.10.0-37.41~16.04.1, 4.10.0-38.42~16.04.1, 4.10.0-42.46~16.04.1
Ubuntu:20.04:LTSlinux-azure-fde5.4.0-1090.95+cvm1.1, 5.4.0-1089.94+cvm1.2, 5.4.0-1086.91+cvm1.1
Ubuntu:16.04:LTSlinux4.4.0-34.53, 4.4.0-92.115, 4.4.0-91.114
Ubuntu:16.04:LTSlinux-gke4.4.0-1009.9, 4.4.0-1006.6, 4.4.0-1005.6
Ubuntu:20.04:LTSlinux-riscv5.4.0-36.41, 5.4.0-37.42, 5.4.0-39.44
Ubuntu:16.04:LTSlinux-snapdragon4.4.0-1019.22, 4.4.0-1015.18, 4.4.0-1013.15
Ubuntu:22.04:LTSlinux-intel-iot-realtime0, 5.15.0-1073.75
Ubuntu:22.04:LTSlinux-realtime5.15.0-1032.35, 0
Ubuntu:16.04:LTSlinux-aws4.4.0-1011.20, 4.4.0-1020.29, 4.4.0-1018.27
Ubuntu:16.04:LTSlinux-gcp4.10.0-1007.7, 4.10.0-1008.8, 4.10.0-1009.9

Timeline

References

Open in Interactive Console →