CVE-2007-5093

Linux Kernel < 2.6.22.6 - Denial of Service via Philips USB Webcam Driver Disconnect

Title source: llm
STIX 2.1

Description

The disconnect method in the Philips USB Webcam (pwc) driver in Linux kernel 2.6.x before 2.6.22.6 "relies on user space to close the device," which allows user-assisted local attackers to cause a denial of service (USB subsystem hang and CPU consumption in khubd) by not closing the device after the disconnect is invoked. NOTE: this rarely crosses privilege boundaries, unless the attacker can convince the victim to unplug the affected device.

References (22)

Core 22
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2008-0275.html
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-558-1
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-574-1
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-578-1
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30294
Mailing List mailing-list x_refsource_mlist
http://marc.info/?l=linux-kernel&m=118873457814808&w=2
Mailing List mailing-list x_refsource_mlist
http://marc.info/?l=linux-kernel&m=118880154122548&w=2
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2008-0972.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28706
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26994
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2008/dsa-1504
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2008:008
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10494
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2007/dsa-1381
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2008:105
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2008/dsa-1503
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29058
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28971
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/25504
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28170
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/32799

Scores

EPSS 0.0035
EPSS Percentile 27.5%

Details

CWE
CWE-399
Status published
Products (21)
linux/linux_kernel 2.6.0 (12 CPE variants)
linux/linux_kernel 2.6.1 (3 CPE variants)
linux/linux_kernel 2.6.2
linux/linux_kernel 2.6.3
linux/linux_kernel 2.6.4
linux/linux_kernel 2.6.5
linux/linux_kernel 2.6.6 (3 CPE variants)
linux/linux_kernel 2.6.7 (2 CPE variants)
linux/linux_kernel 2.6.8 (4 CPE variants)
linux/linux_kernel 2.6.8.1
... and 11 more
Published Sep 26, 2007
Tracked Since Feb 18, 2026