Buffer overflow in the auerswald_probe function in the Auerswald Linux USB driver for the Linux kernel before 2.6.27 allows physically proximate attackers to execute arbitrary code, cause a denial of service via a crafted USB device, or take full control of the system.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-doc | Aug 17, 2018 | Oct 20, 2011 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Feb 11, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 11, 2020 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-ppc64Upgrade kernel-smpUpgrade kernel-vmiUpgrade kernel-xenUpgrade kernel-kdumpUpgrade kernel-bigsmpUpgrade kernel-iseries64Upgrade kernel-defaultUpgrade kernel-xenpaeUpgrade kernel-vmipaeUpgrade kernel-kdumppaeUpgrade kernel-debugUpgrade kernel-syms | Feb 17, 2015 | Feb 17, 2015 |
| Ubuntu | — | Upgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-lpia | Nov 8, 2024 | Feb 11, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub