Every CVE Search/ Get API key

CVE-2017-16648

The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel...

6.6 Medium

The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device. NOTE: the function was later renamed __dvb_frontend_free.

Attack profile

How easy it is to exploit

Attack vector
Physical
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.38%Down 0.3 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 6.6

The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device. NOTE: the function was later renamed __dvb_frontend_free.

Record
CVE-2017-16648
CVSS 3.0
6.6 MediumCVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-416
Updated
2026-11-02
CVE List No score

The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device. NOTE: the function was later renamed __dvb_frontend_free.

Record
CVE-2017-16648
Updated
2026-11-02
EUVDEUVD-2017-7835 No score

The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device. NOTE: the function was later renamed __dvb_frontend_free.

Record
EUVD-2017-7835
Updated
2026-11-03
GitHub AdvisoriesGHSA-hgr4-52jx-v8rc 6.6

The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel...

The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device. NOTE: the function was later renamed __dvb_frontend_free.

Record
GHSA-hgr4-52jx-v8rc
CVSS 3.0
6.6 MediumCVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVRHSA-2018:2948 8.1

Red Hat Security Advisory: kernel-alt security, bug fix, and enhancement update

Record
RHSA-2018:2948
CVSS 3.0
8.1 HighCVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2017-16648 6.6

The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device. NOTE: the function was later renamed __dvb_frontend_free.

Record
UBUNTU-CVE-2017-16648
CVSS 3.0
6.6 MediumCVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2024:10728-1 No score

kernel-devel-5.14.6-1.4 on GA media

These are all security issues fixed in the kernel-devel-5.14.6-1.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10728-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13704-1 No score

kernel-devel-longterm-6.6.17-1.1 on GA media

These are all security issues fixed in the kernel-devel-longterm-6.6.17-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13704-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
Red Hat:enterprise_linux:7::server
From an advisory covering 42 CVEs
 before 0:4.14.0-115.el7a
0:4.14.0-115.el7a
kernel-abi-whitelists
Red Hat:enterprise_linux:7::server
From an advisory covering 42 CVEs
 before 0:4.14.0-115.el7a
0:4.14.0-115.el7a
kernel-alt
Red Hat:enterprise_linux:7::server
From an advisory covering 42 CVEs
 before 0:4.14.0-115.el7a
0:4.14.0-115.el7a
kernel-bootwrapper
Red Hat:enterprise_linux:7::server
From an advisory covering 42 CVEs
 before 0:4.14.0-115.el7a
0:4.14.0-115.el7a
kernel-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 42 CVEs
 before 0:4.14.0-115.el7a
0:4.14.0-115.el7a
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 42 CVEs
 before 0:4.14.0-115.el7a
0:4.14.0-115.el7a
kernel-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 42 CVEs
 before 0:4.14.0-115.el7a
0:4.14.0-115.el7a
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:7::server
From an advisory covering 42 CVEs
 before 0:4.14.0-115.el7a
0:4.14.0-115.el7a
kernel-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 42 CVEs
 before 0:4.14.0-115.el7a
0:4.14.0-115.el7a
kernel-doc
Red Hat:enterprise_linux:7::server
From an advisory covering 42 CVEs
 before 0:4.14.0-115.el7a
0:4.14.0-115.el7a
Show 12 moreShow less
Affected packages
PackageAffectedFixed
kernel-headers
Red Hat:enterprise_linux:7::server
From an advisory covering 42 CVEs
 before 0:4.14.0-115.el7a
0:4.14.0-115.el7a
kernel-tools
Red Hat:enterprise_linux:7::server
From an advisory covering 42 CVEs
 before 0:4.14.0-115.el7a
0:4.14.0-115.el7a
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 42 CVEs
 before 0:4.14.0-115.el7a
0:4.14.0-115.el7a
kernel-tools-libs
Red Hat:enterprise_linux:7::server
From an advisory covering 42 CVEs
 before 0:4.14.0-115.el7a
0:4.14.0-115.el7a
perf
Red Hat:enterprise_linux:7::server
From an advisory covering 42 CVEs
 before 0:4.14.0-115.el7a
0:4.14.0-115.el7a
perf-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 42 CVEs
 before 0:4.14.0-115.el7a
0:4.14.0-115.el7a
python-perf
Red Hat:enterprise_linux:7::server
From an advisory covering 42 CVEs
 before 0:4.14.0-115.el7a
0:4.14.0-115.el7a
python-perf-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 42 CVEs
 before 0:4.14.0-115.el7a
0:4.14.0-115.el7a
kernel-debug-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 42 CVEs
 before 0:4.14.0-115.el7a
0:4.14.0-115.el7a
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 42 CVEs
 before 0:4.14.0-115.el7a
0:4.14.0-115.el7a
kernel-source
openSUSE:Tumbleweed
From an advisory covering 119 CVEs
 before 5.14.6-1.4
5.14.6-1.4
kernel-source
openSUSE:Tumbleweed
From an advisory covering 194 CVEs
 before 6.6.17-1.1
6.6.17-1.1

History

History
RecordedChangedSources
affected, facts
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-16648 is a medium vulnerability (CVSS 6.6) in Linux Kernel, published November 7, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. No source names a fixed version.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 185 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open