The klsi105getlinestate function in drivers/usb/serial/kl5kusb105.c in the Linux kernel before 4.9.5 places uninitialized heap-memory contents into a log entry upon a failure to read the line status, which allows local users to obtain sensitive information by reading the log.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-5549.json"
[
{
"id": "CVE-2017-5549-a1b45f47",
"target": {
"function": "klsi_105_get_line_state",
"file": "drivers/usb/serial/kl5kusb105.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@146cc8a17a3b4996f6805ee5c080e7101277c410",
"digest": {
"function_hash": "192302236391216088371895084918654311517",
"length": 776.0
},
"signature_type": "Function"
},
{
"id": "CVE-2017-5549-aa2114e1",
"target": {
"file": "drivers/usb/serial/kl5kusb105.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@146cc8a17a3b4996f6805ee5c080e7101277c410",
"digest": {
"threshold": 0.9,
"line_hashes": [
"231797909213059485984623779782862929338",
"12140219990823449638021075744655248046",
"143589410928055449330245695111443946895",
"235245251388947450347440707175766661024",
"164024276142463440093143619908953735154",
"234816186157023017324849092301306859167",
"5881361121578668306266148835679076305"
]
},
"signature_type": "Line"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-5549.json"
[
{
"id": "CVE-2017-5549-14ca247c",
"target": {
"file": "drivers/usb/serial/kl5kusb105.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/146cc8a17a3b4996f6805ee5c080e7101277c410",
"digest": {
"threshold": 0.9,
"line_hashes": [
"231797909213059485984623779782862929338",
"12140219990823449638021075744655248046",
"143589410928055449330245695111443946895",
"235245251388947450347440707175766661024",
"164024276142463440093143619908953735154",
"234816186157023017324849092301306859167",
"5881361121578668306266148835679076305"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2017-5549-94db9abc",
"target": {
"function": "klsi_105_get_line_state",
"file": "drivers/usb/serial/kl5kusb105.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/146cc8a17a3b4996f6805ee5c080e7101277c410",
"digest": {
"function_hash": "192302236391216088371895084918654311517",
"length": 776.0
},
"signature_type": "Function"
}
]