CVE-2017-15102

CVE-2017-15102 is a privilege escalation vulnerability in the Linux kernel (before 4.8.1) affecting various distributions, including Canonical, Red Hat, and SUSE Enterprise Linux. It allows a local attacker with physical access to a system to gain elevated privileges by inserting a specially crafted USB device, exploiting a race condition and NULL pointer dereference in the legousbtower.c driver. Rated Medium severity (CVSS 6.3), exploitation requires physical proximity and high attack complexity, but can lead to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.