The \stub_recv_cmd_submit()\ function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8 4.9.71 and 4.4.114 when handling CMD_SUBMIT packets allows attackers to cause a denial of service (arbitrary memory allocation) via a specially crafted USB over IP packet.