SecBoard
Zurück zur CVE-Übersicht

CVE-2017-8066

HIGH(7.2)

AV:L/AC:L/Au:N/C:C/I:C/A:C

Risk Signal Score18/100 — NIEDRIG
  • CVSS 7.2 — Hoch

EPSS-Score

0%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

7.2

Technische Schwere

Beschreibung

drivers/net/can/usb/gs_usb.c in the Linux kernel 4.9.x and 4.10.x before 4.10.2 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.

Referenzen