CVE-2017-7273
kernel: HID: integer underflow in cp_report_fixup() (drivers/hid/hid-cypress.c)
Severity
LowRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · March 27, 2017
Updated · June 28, 2026
Description
An integer underflow flaw was found in the way the Linux kernel handles crafted Cypress HID (Human Interface Device) reports. An attacker with physical access to the system could use this flaw to crash the system and cause a denial of service (DoS).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.0 · 4.6CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-190 · Integer Overflow or Wraparound