VDB
GHSA-3ggx-f2mm-cg59
GHSA-3ggx-f2mm-cg59
PUBLISHED
CVSS 6.599999904632568 MEDIUM
Record from GitHub Advisory Database · Published May 14, 2022
The usbnet_generic_cdc_bind function in drivers/net/usb/cdc_ether.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (divide-by-zero error and system crash) or possibly have unspecified other impact via a crafted USB device.
Risk scores
CVSS 3.0
6.599999904632568
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Timeline
- May 14, 2022 CVE Published
- Apr 29, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-3ggx-f2mm-cg59
vulnetix vdb fixes GHSA-3ggx-f2mm-cg59
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-3ggx-f2mm-cg59/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html url
- https://usn.ubuntu.com/3617-2 url
- https://usn.ubuntu.com/3617-3 url
- https://usn.ubuntu.com/3619-1 url
- https://usn.ubuntu.com/3822-2 url
- https://usn.ubuntu.com/3822-1 url
- https://groups.google.com/d/msg/syzkaller/0e0gmaX9R0g/9Me9JcY2BQAJ url
- https://patchwork.ozlabs.org/patch/834771 url
- https://usn.ubuntu.com/3617-1 url
- https://usn.ubuntu.com/3619-2 url
- http://www.securityfocus.com/bid/101761 url
- https://nvd.nist.gov/vuln/detail/CVE-2017-16649 advisory