CVE-2017-16914: Linux Kernel

Medium severity, CVSS 5.9. EPSS: 4.4% chance of exploitation in the next 30 days.

The "stub_send_ret_submit()" function (drivers/usb/usbip/stub_tx.c) in the Linux Kernel before version 4.14.8, 4.9.71, 4.1.49, and 4.4.107 allows attackers to cause a denial of service (NULL pointer dereference) via a specially crafted USB over IP packet.

Affected products

• Linux Linux Kernel: from 4.1.0, before 4.1.49 (fixed in 4.1.49); from 4.4.0, before 4.4.107 (fixed in 4.4.107); from 4.9.0, before 4.9.71 (fixed in 4.9.71); from 4.14.0, before 4.14.8 (fixed in 4.14.8)

Published 2018-01-31. Last modified 2026-06-17.