TI-2017-06339 Aliases CVE-2017-8831 GHSA-5gx8-3vch-p323

The saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux…

LOW 29CWE-125Published 2017-05-08 · Updated 2024-08-05

Key facts

Attack vector: Physical
Privileges required: None
User interaction: None
Attack complexity: High
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: Will not fix Red Hat: no fix planned

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.

Summary

The saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel through 4.11.5 allows local users to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact by changing a certain sequence-number value, aka a "double fetch" vulnerability.

Why it matters now

EPSS 0.00387 33rd percentileScored 2026-11-07

Fix Will not fix Red Hat: no fix planned

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPE	Versions	Role	Vendor
cpe:2.3:o:linux:linux_kernel::::::::	up to 4.11.5	Vulnerable	Linux
cpe:2.3:o:canonical:ubuntu_linux:14.04::::esm:::	14.04	Vulnerable	Canonical
cpe:2.3:o:debian:debian_linux:7.0:::::::*	7.0	Vulnerable	Debian

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions up to 4.11.5 Vulnerable ·Linux
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* Versions 14.04 Vulnerable ·Canonical
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Debian

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Enterprise Linux 6	Affected	No fix planned: Will not fix
Red Hat Enterprise Linux 7	Affected	No fix planned: Will not fix
Red Hat Enterprise MRG 2	Affected	No fix planned: Will not fix

Not affected: 1 product

Red Hat Enterprise Linux 5

Timeline

2026-10-02 Threatist record created from CVE-2017-8831
2026-10-03 Alias added: GHSA-5gx8-3vch-p323

References

Patch 1

https://github.com/stoth68000/media-tree/commit/354dd3924a2e43806774953de536257548b5002c

Advisory 2

Other 1

https://bugzilla.kernel.org/show_bug.cgi?id=195559

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences