UBUNTU-CVE-2018-16276
An issue was discovered in yurex_read in drivers/usb/misc/yurex.c in the Linux kernel before 4.17.7. Local attackers could use user access read/writes with incorrect bounds checking in the yurex USB driver to crash the kernel or potentially escalate privileges.
02 / AFFECTED SOFTWARE
Affected packages
142 explicit affected versions
19 explicit affected versions
5 explicit affected versions
59 explicit affected versions
81 explicit affected versions
40 explicit affected versions
28 explicit affected versions
24 explicit affected versions
44 explicit affected versions
19 explicit affected versions
53 explicit affected versions
51 explicit affected versions
22 explicit affected versions
17 explicit affected versions
19 explicit affected versions
16 explicit affected versions
17 explicit affected versions
14 explicit affected versions
19 explicit affected versions
26 explicit affected versions
51 explicit affected versions
6 explicit affected versions
12 explicit affected versions
1 explicit affected versions
1 explicit affected versions
23 explicit affected versions
1 explicit affected versions
3 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
An issue was discovered in yurex_read in drivers/usb/misc/yurex.c in the Linux kernel before 4.17.7. Local attackers could use user access read/writes with incorrect bounds checking in the yurex USB driver to crash the kernel or potentially escalate privileges.
05 / REFERENCES
Further evidence
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f1e255d60ae66a9f672ff9a207ee6cd8e33d2679
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.7
- https://github.com/torvalds/linux/commit/f1e255d60ae66a9f672ff9a207ee6cd8e33d2679
- https://ubuntu.com/security/CVE-2018-16276
- https://ubuntu.com/security/notices/USN-3776-1
- https://ubuntu.com/security/notices/USN-3776-2
- https://ubuntu.com/security/notices/USN-3847-1
- https://ubuntu.com/security/notices/USN-3847-2
- https://ubuntu.com/security/notices/USN-3847-3
- https://ubuntu.com/security/notices/USN-3849-1
- https://ubuntu.com/security/notices/USN-3849-2
- https://www.cve.org/CVERecord?id=CVE-2018-16276