CVE-2017-8072

CVE-2017-8072 describes a vulnerability in the Linux kernel's cp2112_gpio_direction_input function (drivers/hid/hid-cp2112.c) affecting versions 4.9.x prior to 4.9.9. This flaw stems from the absence of an expected EIO error status for zero-length reports, potentially allowing local users to achieve an unspecified impact. With a CVSS score of 7.8 (High), this vulnerability is locally exploitable with low attack complexity, potentially leading to high confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.