drivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (BUG and system crash) or possibly have unspecified other impact via a crafted USB device.
The product dereferences a pointer that it expects to be valid but is NULL.
Link | Tags |
---|---|
https://usn.ubuntu.com/3617-1/ | vendor advisory |
https://usn.ubuntu.com/3619-2/ | vendor advisory |
https://usn.ubuntu.com/3617-3/ | vendor advisory |
http://www.securityfocus.com/bid/101846 | vdb entry third party advisory |
https://patchwork.linuxtv.org/patch/45291/ | third party advisory mailing list |
https://usn.ubuntu.com/3617-2/ | vendor advisory |
https://groups.google.com/d/msg/syzkaller/-d6ilzbVu_g/OBy8_62mAwAJ | third party advisory mailing list |
https://usn.ubuntu.com/3619-1/ | vendor advisory |