CVE-2017-6899

Name: CVE-2017-6899
Creator: NVD / NIST
Published: 2017-06-16T17:29:00.187+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.35%

Last modified Jun 17, 2026

CVE-2017-6899 is a vulnerability of currently unknown severity. The msm_bus_dbg_update_request_write function in drivers/platform/msm/msm_bus/msm_bus_dbg.c in android_kernel_huawei_msm8916 through 2017-06-16 in LineageOS, and possibly other kernels for MSM devices, allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted /sys/kernel/debug/msm-bus-dbg/client-data/update-request write request.. EPSS estimates a 0.35% chance of exploitation in the next 30 days.

Description

The msm_bus_dbg_update_request_write function in drivers/platform/msm/msm_bus/msm_bus_dbg.c in android_kernel_huawei_msm8916 through 2017-06-16 in LineageOS, and possibly other kernels for MSM devices, allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted /sys/kernel/debug/msm-bus-dbg/client-data/update-request write request.

Metrics

EPSS Probability

0.35%

26.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-476

Affected Software

Vendor	Product	Versions
Lineageos	Lineageos	<= 2017-06-16

References

http://blog.secret-team.cn/index.php/archives/5/Third Party Advisory
http://www.securityfocus.com/bid/99107Third Party Advisory, VDB Entry
http://blog.secret-team.cn/index.php/archives/5/Third Party Advisory
http://www.securityfocus.com/bid/99107Third Party Advisory, VDB Entry

Timeline

Published: Jun 16, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2017-6899?

How severe is CVE-2017-6899?

Severity scoring for CVE-2017-6899 is pending analysis. The EPSS model estimates a 0.35% probability of exploitation in the next 30 days.

How do I fix CVE-2017-6899?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-6899?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST