In parse_hid_report_descriptor in drivers/input/tablet/gtco.c in the Linux kernel through 5.2.1, a malicious USB device can send an HID report that triggers an out-of-bounds write during generation of debugging messages.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernelUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-develUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-docUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extra | May 31, 2024 | Jul 17, 2019 |
| Debian | — | Upgrade linux | Aug 14, 2019 | Jul 17, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debug-develUpgrade perfUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64 | Dec 4, 2019 | Jul 17, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel | Nov 19, 2019 | Jul 17, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perf | Sep 12, 2019 | Jul 17, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-sourceUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade python3-perf | Mar 23, 2020 | Jul 17, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 9, 2019 | Jul 11, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 23, 2024 | Jul 17, 2019 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-rtUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-rt-kvmUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade perf-debuginfoUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo | Jun 17, 2024 | Jul 17, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-ec2Upgrade kernel-source-azureUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-ec2-develUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-default | Aug 8, 2019 | Jul 17, 2019 |
| Ubuntu | — | Upgrade linux-image-aws-hweUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1123-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-1019-raspi2Upgrade linux-image-5.0.0-31-generic-lpaeUpgrade linux-image-gke-5.0Upgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-5.0.0-31-genericUpgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-1018-awsUpgrade linux-image-5.0.0-1019-kvmUpgrade linux-image-5.0.0-1023-snapdragonUpgrade linux-image-4.15.0-60-genericUpgrade linux-image-4.4.0-1127-snapdragonUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-165-genericUpgrade linux-image-4.4.0-1059-kvmUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-4.4.0-165-generic-lpaeUpgrade linux-image-4.4.0-165-powerpc-e500mcUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc64-embUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1095-awsUpgrade linux-image-4.4.0-165-powerpc-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-5.0.0-31-lowlatencyUpgrade linux-image-4.4.0-165-powerpc64-smpUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-5.0.0-1020-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.0.0-1020-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-awsUpgrade linux-image-4.4.0-165-powerpc64-embUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-oemUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-165-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-5.0.0-1022-azure | Sep 3, 2019 | Jul 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub