UBUNTU-CVE-2017-16648

Advisory lineage Upstream: 1 Downstream: 0

Upstream

CVE-2017-16648

Published: 07 Nov 2017, 23:29

Last modified:16 Jul 2025, 08:13

Vulnerability Summary

Overall Risk (default)

medium

26/100

CVSS Score

6.6 MEDIUM

3.0 (osv_ubuntu)

EPSS Score

No data

KEV

Not listed

Ransomware

No reports

Public exploits

None found

Dark Web

Not detected

Timeline

07 Nov 2017, 23:29

Published

Vulnerability first disclosed

16 Jul 2025, 08:13

Last Modified

Vulnerability information updated

Description

The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device. NOTE: the function was later renamed __dvb_frontend_free.

CVSS Metrics

v3.0•MEDIUM•Score: 6.6CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Systems

ubuntu•linux-azure
< 4.15.0-1023.24~14.04.1 | < 4.15.0-1013.13~16.04.2
ubuntu•linux-gcp
< 4.15.0-1014.14~16.04.1
ubuntu•linux-hwe
< 4.15.0-24.26~16.04.1