The omninet_open function in drivers/usb/serial/omninet.c in the Linux kernel before 4.10.4 allows local users to cause a denial of service (tty exhaustion) by leveraging reference count mishandling.
No PoCs from references.
- https://github.com/thdusdl1219/CVE-Study
- https://github.com/vincent-deng/veracode-container-security-finding-parser