CVE-2018-16276

Description

An issue was discovered in yurex_read in drivers/usb/misc/yurex.c in the Linux kernel before 4.17.7. Local attackers could use user access read/writes with incorrect bounds checking in the yurex USB driver to crash the kernel or potentially escalate privileges.

Weakness classification

• CWE-787: Out-of-bounds Write

Primary references

• cve@mitre.org — Patch, Vendor Advisory
• cve@mitre.org — Issue Tracking
• cve@mitre.org — Issue Tracking
• cve@mitre.org — Vendor Advisory
• cve@mitre.org — Patch, Third Party Advisory
• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory