The uas driver in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device, related to drivers/usb/storage/uas-detect.h and drivers/usb/storage/uas.c.
[
{
"target": {
"function": "uas_switch_interface",
"file": "drivers/usb/storage/uas.c"
},
"id": "CVE-2017-16530-3d4d9d08",
"deprecated": false,
"digest": {
"length": 214.0,
"function_hash": "117238571638502480311424488025985011839"
},
"signature_type": "Function",
"source": "https://github.com/torvalds/linux/commit/786de92b3cb26012d3d0f00ee37adf14527f35c4",
"signature_version": "v1"
},
{
"target": {
"file": "drivers/usb/storage/uas.c"
},
"id": "CVE-2017-16530-54b26a8f",
"deprecated": false,
"digest": {
"line_hashes": [
"331719308274957394111176723037705820458",
"32429433221788733921934669773713569705",
"22628278831062275858642314892615508595",
"95805446629808020239375457792092820601",
"61353457019542444131343012727253767652",
"320748208621719848563834093281602112642",
"283245905274521824122191202258924427361",
"37845356319086323745886548562410894967",
"192249655231323608075794069361777276205"
],
"threshold": 0.9
},
"signature_type": "Line",
"source": "https://github.com/torvalds/linux/commit/786de92b3cb26012d3d0f00ee37adf14527f35c4",
"signature_version": "v1"
},
{
"target": {
"function": "uas_find_uas_alt_setting",
"file": "drivers/usb/storage/uas-detect.h"
},
"id": "CVE-2017-16530-d101974b",
"deprecated": false,
"digest": {
"length": 245.0,
"function_hash": "335749954660399003755202361910925973964"
},
"signature_type": "Function",
"source": "https://github.com/torvalds/linux/commit/786de92b3cb26012d3d0f00ee37adf14527f35c4",
"signature_version": "v1"
},
{
"target": {
"function": "uas_use_uas_driver",
"file": "drivers/usb/storage/uas-detect.h"
},
"id": "CVE-2017-16530-fb9ad91f",
"deprecated": false,
"digest": {
"length": 1687.0,
"function_hash": "254674537179909817683822182599077826536"
},
"signature_type": "Function",
"source": "https://github.com/torvalds/linux/commit/786de92b3cb26012d3d0f00ee37adf14527f35c4",
"signature_version": "v1"
},
{
"target": {
"file": "drivers/usb/storage/uas-detect.h"
},
"id": "CVE-2017-16530-fd4abfc2",
"deprecated": false,
"digest": {
"line_hashes": [
"265055783642543906810303133075613194253",
"113785494624817562994640096900454186728",
"174337582451480804740218726846943668612",
"297126877497046265877953684454997543698",
"81346623203854959294327388540076437859",
"17632463923552582691217845133100767180",
"167495671381309700666977782150499824958",
"74441165543095715878757991606818642827",
"11240161282927921787396756774177244343",
"201781601716565104951385897136899051531",
"258012746344604800106274786324488210101",
"33004691405159677432715928376571099567",
"18178230885668919472067289865869486182",
"73005178159292008394876925810982439290",
"218428134248573451166130904750433847069",
"240213684411983310323116838400551004108",
"266808588304836743661926528138415461413",
"106582833759350307508499070214093193324"
],
"threshold": 0.9
},
"signature_type": "Line",
"source": "https://github.com/torvalds/linux/commit/786de92b3cb26012d3d0f00ee37adf14527f35c4",
"signature_version": "v1"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-16530.json"