In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer, aka CID-303911cfc5b9. This affects drivers/usb/core/file.c.
CVSS Details
- CVSS 3.1 Base Score: 4.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Dec 3, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 1, 2020 | Dec 3, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debug-devel | Jun 17, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headers | Apr 16, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade perf | Dec 27, 2019 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernel-sourceUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-headersUpgrade python3-perf | Jan 3, 2020 | Dec 3, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 4, 2020 | Aug 12, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 1, 2020 | Dec 3, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-obs-build | Dec 18, 2019 | Dec 3, 2019 |
| Ubuntu | — | Upgrade linux-hweUpgrade linux-gke-5.0Upgrade linuxUpgrade linux-awsUpgrade linux-oem-osp1Upgrade linux-lts-xenialUpgrade linux-oemUpgrade linux-gcpUpgrade linux-gke-4.15Upgrade linux-azureUpgrade linux-snapdragonUpgrade linux-aws-fipsUpgrade linux-fipsUpgrade linux-kvmUpgrade linux-raspi2Upgrade linux-azure-fipsUpgrade linux-oracleUpgrade linux-aws-hwe | Nov 19, 2024 | Dec 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub