CVE-2017-16912

The "get_pipe()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 allows attackers to cause a denial of service (out-of-bounds read) via a specially crafted USB over IP packet.

Date published : 2018-01-31

http://www.securityfocus.com/bid/102150

https://www.debian.org/security/2018/dsa-4187