{"schemaVersion":3,"id":"USN-3406-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"linux vulnerabilities\n\nIt was discovered that an out of bounds read vulnerability existed in the\nassociative array implementation in the Linux kernel. A local attacker\ncould use this to cause a denial of service (system crash) or expose\nsensitive information. (CVE-2016-7914)\n\nIt was discovered that a NULL pointer dereference existed in the Direct\nRendering Manager (DRM) driver for VMWare devices in the Linux kernel. A\nlocal attacker could use this to cause a denial of service (system crash).\n(CVE-2017-7261)\n\nIt was discovered that the USB Cypress HID drivers for the Linux kernel did\nnot properly validate reported information from the device. An attacker\nwith physical access could use this to expose sensitive information (kernel\nmemory). (CVE-2017-7273)\n\nA reference count bug was discovered in the Linux kernel ipx protocol\nstack. A local attacker could exploit this flaw to cause a denial of\nservice or possibly other unspecified problems. (CVE-2017-7487)\n\nHuang Weller discovered that the ext4 filesystem implementation in the\nLinux kernel mishandled a needs-flushing-before-commit list. A local\nattacker could use this to expose sensitive information. (CVE-2017-7495)\n\nIt was discovered that an information leak existed in the set_mempolicy and\nmbind compat syscalls in the Linux kernel. A local attacker could use this\nto expose sensitive information (kernel memory). (CVE-2017-7616)","dates":{"published":"2017-08-28T21:24:38.000Z","modified":"2026-04-22T09:25:06.344Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"linux","name":"linux","label":"linux","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux","purlType":"deb","versions":[{"text":"< 3.13.0-129.178","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.13.0-129.178","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-3406-1","label":"ubuntu.com/security/notices/USN-3406-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-7914","label":"ubuntu.com/security/CVE-2016-7914","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2017-7261","label":"ubuntu.com/security/CVE-2017-7261","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2017-7273","label":"ubuntu.com/security/CVE-2017-7273","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2017-7487","label":"ubuntu.com/security/CVE-2017-7487","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2017-7495","label":"ubuntu.com/security/CVE-2017-7495","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2017-7616","label":"ubuntu.com/security/CVE-2017-7616","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2016-7914","CVE-2017-7261","CVE-2017-7273","CVE-2017-7487","CVE-2017-7495","CVE-2017-7616"],"downstream":[],"duplicates":[],"related":["CVE-2016-7914","CVE-2017-7261","CVE-2017-7273","CVE-2017-7487","CVE-2017-7495","CVE-2017-7616"]},"timeline":[{"kind":"published","date":"2017-08-28T21:24:38.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-22T09:25:06.344Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T21:51:23.090Z","stale":false,"partial":false}}