CVE-2017-5548 REJECTED

drivers/net/ieee802154/atusb.c in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.

EPSS 0.04% · 13.2th percentile

Risk Scores

EPSS Score
0.04%
13.2th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlinux-hwe0, 4.8.0-36.36~16.04.1, 4.8.0-39.42~16.04.1

Timeline

References

Open in Interactive Console →