A Google code security researcher’s recent discovery of 14 flaws in Linux kernel USB drivers led to last-minute fixes in the Linux 4.14 release candidate code set for distribution on Sunday. The flaws, which Google researcher Andrey Konovalov disclosed earlier this week, affect the Linux kernel before version 4.13.8. All 14 have available fixes. However, they are part of a much larger group of 79 flaws affecting the Linux kernel’s USB drivers, some of which remain unpatched.
From: Linux Insider