CVE:CVE-2017-15102
CNNVD:CNNVD-201711-493
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 4.8.1之前的版本中的drivers/usb/misc/legousbtower.c文件的‘tower_probe’函数存在安全漏洞。本地攻击者可借助特制的USB设备利用该漏洞获取权限。
solution:Upgrade linux linux_kernel to a higher version than 4.8.1,and avoid the version (,4.8.1); Upgrade redhat enterprise_linux to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,and avoid the version 12.04,14.04