The lp_setup() code doesn't apply any bounds checking when passing "lp=none", and only in this case, resulting in an overflow of the parport_nr[] array. All versions in Git history are affected. https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc.git/commit/?h=char-misc-linus&id=3e21f4af170bebf47c187c1ff8bf155583c9f3b1 https://nvd.nist.gov/vuln/detail/CVE-2017-1000363
