RETIRED: Linux Kernel 'drivers/net/usb/rtl8150.c' Local Denial of Service Vulnerability

Bugtraq ID:	98008
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-8068
Remote:	No
Local:	Yes
Published:	Apr 25 2017 12:00AM
Updated:	Apr 15 2019 09:00PM
Credit:	The vendor reported this issue.
Vulnerable:	Linux kernel 4.9.8 Linux kernel 4.9.4 Linux kernel 4.9.3 Linux kernel 4.9.9 Linux kernel 4.9
Not Vulnerable:	Linux kernel 4.9.11

RETIRED: Linux Kernel 'drivers/net/usb/rtl8150.c' Local Denial of Service Vulnerability

The Linux Kernel is prone to a local denial-of-service vulnerability.

A local attacker can exploit this issue to crash the affected application.resulting in denial-of-service conditions. Other attacks are also possible.

Linux Kernel versions 4.9.x prior to 4.9.11 are vulnerable.

This BID is being retired as a duplicate of BID 98000 Linux Kernel 'drivers/net/usb/pegasus.c' Local Denial of Service Vulnerability.

RETIRED: Linux Kernel 'drivers/net/usb/rtl8150.c' Local Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Linux Kernel 'drivers/net/usb/rtl8150.c' Local Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

RETIRED: Linux Kernel 'drivers/net/usb/rtl8150.c' Local Denial of Service Vulnerability

References:

• Linux kernel Homepage (kernel.org)
  
• rtl8150: Use heap buffers for all register access (Linux)