CVE-2017-7273
N/A
Published: March 27, 2017 at 05:00 PM UTC
Updated: June 17, 2026 at 01:23 AM UTC
1 product affected across 1 vendorLinux Kernel
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.5%
Description
The cp_report_fixup function in drivers/hid/hid-cypress.c in the Linux kernel 3.2 and 4.x before 4.9.4 allows physically proximate attackers to cause a denial of service (integer underflow) or possibly have unspecified other impact via a crafted HID report.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
4.04.0.04.0.24.0.34.0.44.0.54.0.64.0.74.0.84.0.94.1.04.1.104.1.114.1.124.1.134.1.144.1.154.1.164.1.174.1.184.1.194.1.24.1.204.1.214.1.224.1.234.1.34.1.334.1.44.1.54.1.64.1.74.1.84.1.94.104.10.14.10.24.10.44.2.04.2.14.2.24.2.34.2.44.2.54.2.74.2.84.3 rc74.3.04.3.14.3.24.3.34.3.54.3.64.4 rc84.4.04.4.14.4.24.4.224.4.234.4.244.4.254.4.264.4.274.4.284.4.34.4.324.4.44.4.54.4.64.4.74.4.84.4.94.5.04.5.0 rc74.5.14.5.24.5.34.5.44.5.54.5.74.64.6.24.6.34.6.44.6.54.6.64.6.74.74.7 rc64.7.44.7.64.84.8.14.8.104.8.114.8.124.8.144.8.164.8.174.8.24.8.34.8.44.8.54.8.64.8.74.8.84.8.94.9.14.9.24.9.3
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (5)
x_refsource_CONFIRMPatchThird Party Advisory
Source: [email protected]
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1ebb71143758f45dc0fa76e2f48429e13b16d110x_refsource_CONFIRMRelease NotesVendor Advisory
Source: [email protected]
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.4VDB Entryx_refsource_BIDThird Party Advisory
Source: [email protected]
http://www.securityfocus.com/bid/97190x_refsource_CONFIRMPatchThird Party Advisory
Source: [email protected]
https://github.com/torvalds/linux/commit/1ebb71143758f45dc0fa76e2f48429e13b16d110Quick Info
StatusMODIFIED
CWE
NVD-CWE-Other
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card