CVE-2017-8068

high

Published 2017-04-23 · Modified 2026-05-13

💬 Discuss on Community ✚ Propose mitigation

CVSS v3

7.8

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v4 NEW

—

not yet in upstream

VIR risk

7.8

Description

drivers/net/usb/pegasus.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.

Predictions

Exploit likelihood

75%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

Mitigation details

Source: Debian Security Tracker · View original ↗ · DFSG

CVE-2017-8068 NameCVE-2017-8068 Descriptiondrivers/net/usb/pegasus.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. SourceCVE (at NVD; CERT,…

CVE-2017-8068

Name	CVE-2017-8068
Description	drivers/net/usb/pegasus.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	852556

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
linux (PTS)	bullseye	5.10.223-1	fixed
	bullseye (security)	5.10.257-1	fixed
	bookworm	6.1.170-3	fixed
	bookworm (security)	6.1.174-1	fixed
	trixie	6.12.86-1	fixed
	trixie (security)	6.12.90-2	fixed
	forky	7.0.9-1	fixed
	sid	7.0.10-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Debian Bugs
linux	source	wheezy	(not affected)
linux	source	jessie	(not affected)
linux	source	(unstable)	4.9.10-1	852556

Notes

[jessie] - linux <not-affected> (Introduced in 4.9-rc1 in combination with VMAP_STACK)
[wheezy] - linux <not-affected> (Introduced in 4.9-rc1 in combination with VMAP_STACK)
Fixed by: https://git.kernel.org/linus/5593523f968bc86d42a035c6df47d5e0979b5ace

Home - Debian Security - Source (Git)

Apply commands

text fix

Notes

[jessie] - linux <not-affected> (Introduced in 4.9-rc1 in combination with VMAP_STACK)[wheezy] - linux <not-affected> (Introduced in 4.9-rc1 in combination with VMAP_STACK)Fixed by: https://git.kernel.org/linus/5593523f968bc86d42a035c6df47d5e0979b5ace

OS impact

Linux kernel Affected 10 releases

Version	Status	Fixed in
4.9.10	Affected	—
4.9.9	Affected	—
4.9.8	Affected	—
4.9.6	Affected	—
4.9.5	Affected	—
4.9.4	Affected	—
4.9.3	Affected	—
4.9.2	Affected	—
4.9.1	Affected	—
4.9	Affected	—

SUSE Affected 1 release

Version	Status	Fixed in
—	Affected	—

Debian Fixed 5 releases

Version	Status	Fixed in
trixie	Fixed	`4.9.10-1`
sid	Fixed	`4.9.10-1`
forky	Fixed	`4.9.10-1`
bullseye	Fixed	`4.9.10-1`
bookworm	Fixed	`4.9.10-1`

References

CWEs

CWE-119

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.