vulnerability

Amazon Linux AMI: CVE-2021-38204: Security patch for kernel (ALAS-2021-1539)

Severity
5
CVSS
(AV:L/AC:L/Au:N/C:P/I:P/A:P)
Published
Aug 8, 2021
Added
Oct 5, 2021
Modified
Oct 14, 2022

Description

drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations.

Solution

amazon-linux-upgrade-kernel

References

    Title
    NEW

    Explore Exposure Command

    Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.