### [CVE-2017-5549](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5549) ![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen) ### Description The klsi_105_get_line_state function in drivers/usb/serial/kl5kusb105.c in the Linux kernel before 4.9.5 places uninitialized heap-memory contents into a log entry upon a failure to read the line status, which allows local users to obtain sensitive information by reading the log. ### POC #### Reference No PoCs from references. #### Github - https://github.com/thdusdl1219/CVE-Study - https://github.com/vincent-deng/veracode-container-security-finding-parser