Launchpad.net

CVE 2017-16649

The usbnet_generic_cdc_bind function in drivers/net/usb/cdc_ether.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (divide-by-zero error and system crash) or possibly have unspecified other impact via a crafted USB device.

Related bugs and status

CVE-2017-16649 (Candidate) is related to these bugs:

Bug #1779848: Cleanup Meltdown/Spectre implementation

		In	Importance	Status
1779848	Cleanup Meltdown/Spectre implementation	linux (Ubuntu)	Undecided	Invalid
1779848	Cleanup Meltdown/Spectre implementation	linux (Ubuntu Trusty)	Undecided	Fix Released
1779848	Cleanup Meltdown/Spectre implementation	linux (Ubuntu Xenial)	Undecided	Invalid
1779848	Cleanup Meltdown/Spectre implementation	linux (Ubuntu Precise)	Undecided	Fix Released

Bug #1798013: xattr length returned by vfs_getxattr() is not correct in Trusty kernel

		In	Importance	Status
1798013	xattr length returned by vfs_getxattr() is not correct in Trusty kernel	linux (Ubuntu)	Medium	Fix Released
1798013	xattr length returned by vfs_getxattr() is not correct in Trusty kernel	ubuntu-kernel-tests	Medium	Fix Released
1798013	xattr length returned by vfs_getxattr() is not correct in Trusty kernel	linux (Ubuntu Trusty)	Medium	Fix Released

Bug #1799399: linux: 3.13.0-162.212 -proposed tracker

		In	Importance	Status
1799399	linux: 3.13.0-162.212 -proposed tracker	linux (Ubuntu)	Undecided	Invalid
1799399	linux: 3.13.0-162.212 -proposed tracker	linux (Ubuntu Trusty)	Medium	Fix Released
1799399	linux: 3.13.0-162.212 -proposed tracker	Kernel SRU Workflow	Medium	Fix Released
1799399	linux: 3.13.0-162.212 -proposed tracker	Kernel SRU Workflow automated-testing	Medium	Fix Released
1799399	linux: 3.13.0-162.212 -proposed tracker	Kernel SRU Workflow certification-testing	Medium	Fix Released
1799399	linux: 3.13.0-162.212 -proposed tracker	Kernel SRU Workflow prepare-package	Medium	Fix Released
1799399	linux: 3.13.0-162.212 -proposed tracker	Kernel SRU Workflow prepare-package-meta	Medium	Fix Released
1799399	linux: 3.13.0-162.212 -proposed tracker	Kernel SRU Workflow prepare-package-signed	Medium	Fix Released
1799399	linux: 3.13.0-162.212 -proposed tracker	Kernel SRU Workflow promote-to-proposed	Medium	Fix Released
1799399	linux: 3.13.0-162.212 -proposed tracker	Kernel SRU Workflow promote-to-security	Medium	Fix Released
1799399	linux: 3.13.0-162.212 -proposed tracker	Kernel SRU Workflow promote-to-updates	Medium	Fix Released
1799399	linux: 3.13.0-162.212 -proposed tracker	Kernel SRU Workflow regression-testing	Medium	Fix Released
1799399	linux: 3.13.0-162.212 -proposed tracker	Kernel SRU Workflow security-signoff	Medium	Fix Released
1799399	linux: 3.13.0-162.212 -proposed tracker	Kernel SRU Workflow upload-to-ppa	Medium	Invalid
1799399	linux: 3.13.0-162.212 -proposed tracker	Kernel SRU Workflow verification-testing	Medium	Fix Released

Bug #1800254: packet socket panic in Trusty 3.13.0-157 and later

Summary				In	Importance	Status
	1800254	packet socket panic in Trusty 3.13.0-157 and later		linux (Ubuntu)	Undecided	Invalid
	1800254	packet socket panic in Trusty 3.13.0-157 and later		linux (Ubuntu Trusty)	Medium	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2017-16649

Related bugs and status

Related bugs

References