Out-of-Bounds Read Vulnerability in Linux Kernel's get_pipe() Function

CVE-2017-16912 · HIGH Severity

AV:N/AC:M/AU:N/C:N/I:N/A:C

The "get_pipe()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 allows attackers to cause a denial of service (out-of-bounds read) via a specially crafted USB over IP packet.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.