The get_endpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-16532.json"
[
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/7c80f9e4a588f1925b07134bb2e3689335f6c6d8",
"digest": {
"line_hashes": [
"113778094315091250476684645216244649370",
"252001497086420438729993647392173436929",
"115773873498202143658664301436805419216",
"225589642581899726107906177152149402904",
"157953684793910589339630105844219246538",
"252836606128504164995656431858223624559",
"227517357788421263413667318290442327219",
"291171135027805114061736850918043840497",
"32409678737961079337392253068935377184"
],
"threshold": 0.9
},
"id": "CVE-2017-16532-66a82a07",
"deprecated": false,
"target": {
"file": "drivers/usb/misc/usbtest.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/7c80f9e4a588f1925b07134bb2e3689335f6c6d8",
"digest": {
"function_hash": "156318679802958352384570139721220230819",
"length": 2093.0
},
"id": "CVE-2017-16532-bb6cbdd7",
"deprecated": false,
"target": {
"file": "drivers/usb/misc/usbtest.c",
"function": "get_endpoints"
}
}
]