PT-2017-17625 · Linux+3 · Linux Kernel+3

Benoit Camredon · Published 2015-11-10 · Updated 2021-01-05 · CVE-2017-7273

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.2 through 4.9.3

Description The issue is related to the cp report fixup function in the Linux kernel, which can be exploited by physically proximate attackers to cause a denial of service due to an integer underflow. It is also possible that this issue may have other unspecified impacts via a crafted HID report.

Recommendations For Linux kernel versions 3.2 through 4.9.3, update to version 4.9.4 or later to resolve the issue.

Fix

Related Identifiers

ALT-PU-2015-1968

ALT-PU-2016-1493

ALT-PU-2016-1572

ALT-PU-2016-1862

ALT-PU-2016-2022

ALT-PU-2016-2082

ALT-PU-2016-2226

ALT-PU-2016-2322

ALT-PU-2016-2462

ALT-PU-2017-1054

ALT-PU-2017-1342

CVE-2017-7273

DLA-922-1

SUSE-SU-2018:3746-1

SUSE-SU-2018:3869-1

SUSE-SU-2019:1289-1

SUSE-SU-2019:13937-1

USN-3361-1

USN-3406-1

USN-3406-2

Affected Products

Alt Linux

Linux Kernel

Suse

Ubuntu

References · 184

• https://github.com/torvalds/linux/commit/1ebb71143758f45dc0fa76e2f48429e13b16d110 · Patch
• https://ubuntu.com/security/CVE-2017-5551 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7495 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-8636 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-7914 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2017-3595.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:13937-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7889 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3406-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-7273 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-6347 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3361-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-6214 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7895 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-5550 · Vendor Advisory