The disconnect method in the Philips USB Webcam (pwc) driver in Linux kernel 2.6.x before 2.6.22.6 "relies on user space to close the…

Description

The disconnect method in the Philips USB Webcam (pwc) driver in Linux kernel 2.6.x before 2.6.22.6 "relies on user space to close the device," which allows user-assisted local attackers to cause a denial of service (USB subsystem hang and CPU consumption in khubd) by not closing the device after the disconnect is invoked. NOTE: this rarely crosses privilege boundaries, unless the attacker can convince the victim to unplug the affected device.

Scores

EPSS (exploitation in 30 days)

0.35% · top 72% of all CVEs (3 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.0.

Weakness

• n/a
• CWE-399 (opens in a new tab)All about CWE-399 and its CVEs

Affected products

• n/a

  • affected n/a

References (22)

• RHSA-2008:0275 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• 30294 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 20070902 Oops in pwc v4l driver (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• 20070903 Re: Oops in pwc v4l driver (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• RHSA-2008:0972 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• 28706 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.6 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 26994 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• DSA-1504 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• MDVSA-2008:008 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
• oval:org.mitre.oval:def:10494 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
• USN-558-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
• DSA-1381 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• MDVSA-2008:105 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
• DSA-1503 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• USN-574-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
• 29058 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 28971 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 25504 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• 28170 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 32799 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• USN-578-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2007-5093](https://trackcve.app/badge/CVE-2007-5093.svg)](https://trackcve.app/cve/CVE-2007-5093)

Record last updated 7 Aug 2024, 15:17 UTC.