Launchpad CVE tracker

CVE 2017-16535

The usb_get_bos_descriptor function in drivers/usb/core/config.c in the Linux kernel before 4.13.10 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device.

Related bugs and status

CVE-2017-16535 (Candidate) is related to these bugs:

Bug #1774181: Update to upstream's implementation of Spectre v1 mitigation

		In	Importance	Status
1774181	Update to upstream's implementation of Spectre v1 mitigation	linux (Ubuntu)	Undecided	Invalid
1774181	Update to upstream's implementation of Spectre v1 mitigation	linux (Ubuntu Precise)	Undecided	Fix Released
1774181	Update to upstream's implementation of Spectre v1 mitigation	linux (Ubuntu Trusty)	Undecided	Fix Released
1774181	Update to upstream's implementation of Spectre v1 mitigation	linux (Ubuntu Xenial)	Undecided	Fix Released

Bug #1775137: Prevent speculation on user controlled pointer

		In	Importance	Status
1775137	Prevent speculation on user controlled pointer	linux (Ubuntu)	Undecided	Invalid
1775137	Prevent speculation on user controlled pointer	linux (Ubuntu Xenial)	Undecided	Fix Released
1775137	Prevent speculation on user controlled pointer	linux (Ubuntu Precise)	Undecided	Fix Released
1775137	Prevent speculation on user controlled pointer	linux (Ubuntu Trusty)	Undecided	Fix Released

Bug #1777029: fscache: Fix hanging wait on page discarded by writeback

		In	Importance	Status
1777029	fscache: Fix hanging wait on page discarded by writeback	linux (Ubuntu)	High	Confirmed
1777029	fscache: Fix hanging wait on page discarded by writeback	linux (Ubuntu Bionic)	High	Fix Released
1777029	fscache: Fix hanging wait on page discarded by writeback	linux (Ubuntu Trusty)	High	Fix Released
1777029	fscache: Fix hanging wait on page discarded by writeback	linux (Ubuntu Artful)	High	Won't Fix
1777029	fscache: Fix hanging wait on page discarded by writeback	linux (Ubuntu Xenial)	High	Fix Released

Bug #1779923: other users' coredumps can be read via setgid directory and killpriv bypass

		In	Importance	Status
1779923	other users' coredumps can be read via setgid directory and killpriv bypass	linux (Ubuntu)	Medium	Fix Released
1779923	other users' coredumps can be read via setgid directory and killpriv bypass	linux (Ubuntu Trusty)	Medium	Fix Released
1779923	other users' coredumps can be read via setgid directory and killpriv bypass	linux (Ubuntu Cosmic)	Medium	Won't Fix
1779923	other users' coredumps can be read via setgid directory and killpriv bypass	linux (Ubuntu Bionic)	Medium	Fix Released
1779923	other users' coredumps can be read via setgid directory and killpriv bypass	linux (Ubuntu Xenial)	Medium	Fix Released

Bug #1787982: linux: 3.13.0-157.207 -proposed tracker

		In	Importance	Status
1787982	linux: 3.13.0-157.207 -proposed tracker	linux (Ubuntu)	Undecided	Invalid
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow	Medium	Fix Released
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow automated-testing	Medium	Fix Released
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow certification-testing	Medium	Invalid
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow prepare-package	Medium	Fix Released
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow prepare-package-meta	Medium	Fix Released
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow prepare-package-signed	Medium	Fix Released
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow promote-to-proposed	Medium	Fix Released
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow promote-to-security	Medium	Fix Released
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow promote-to-updates	Medium	Fix Released
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow regression-testing	Medium	Fix Released
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow security-signoff	Medium	Fix Released
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow upload-to-ppa	Medium	Invalid
1787982	linux: 3.13.0-157.207 -proposed tracker	Kernel SRU Workflow verification-testing	Medium	Fix Released
1787982	linux: 3.13.0-157.207 -proposed tracker	linux (Ubuntu Trusty)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2017-16535

References