An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-devel | Apr 27, 2020 | Dec 17, 2018 |
| Amazon_linux | — | Upgrade kernel | Jan 12, 2019 | Dec 17, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 6, 2019 | Dec 17, 2018 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Dec 17, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64 | Apr 2, 2019 | Dec 17, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel | Mar 27, 2019 | Dec 17, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-devel | Apr 3, 2019 | Dec 17, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 31, 2019 | Dec 5, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 17, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 6, 2019 | Dec 17, 2018 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-default-extra | Jan 19, 2019 | Dec 17, 2018 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-azureUpgrade linux-image-snapdragonUpgrade linux-image-aws-hweUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-4.4.0-142-generic-lpaeUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1038-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-4.4.0-142-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-4.4.0-1075-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-4.4.0-1103-raspi2Upgrade linux-image-4.4.0-142-powerpc64-smpUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-4.4.0-142-genericUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-142-powerpc64-embUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1107-snapdragonUpgrade linux-image-gcpUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-142-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-4.4.0-142-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-4.4.0-1040-kvmUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1042-kvm | Feb 8, 2019 | Dec 17, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 17, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub