PT-2017-3588 · Linux+3 · Linux Kernel+3
Published
2017-07-12
·
Updated
2023-02-07
·
CVE-2017-18079
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 4.12.4
Description:
The issue is related to a driver error in the Linux kernel, specifically in the i8042 controller driver. It allows attackers to cause a denial of service, resulting in a system crash due to a NULL pointer dereference. There is also a possibility of unspecified other impact. The problem arises because the port->exists value can change after it has been validated.
Recommendations:
For versions prior to 4.12.4, update to version 4.12.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable driver to minimize the risk of exploitation.
Fix
DoS
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linux Kernel
Suse
Ubuntu