The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object out-of-bounds (OOB) read that potentially allows arbitrary read in the kernel address space.
CVSS Details
- CVSS 3.1 Base Score: 4.6
- CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 6, 2019 | Mar 21, 2019 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debugUpgrade python-perfUpgrade perfUpgrade kernel-tools | May 1, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-headers | May 30, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-devel | May 1, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 16, 2019 | Dec 12, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 21, 2019 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 6, 2019 | Mar 21, 2019 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-default-extra | Jan 18, 2019 | Jan 18, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1056-azureUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-4.15.0-60-genericUpgrade linux-image-raspi2Upgrade linux-image-gke-4.15Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.4.0-1108-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-143-lowlatencyUpgrade linux-image-4.4.0-143-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1041-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-143-powerpc64-embUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-4.4.0-143-powerpc64-smpUpgrade linux-image-gkeUpgrade linux-image-4.4.0-143-powerpc-e500mcUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1077-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-143-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-4.4.0-143-genericUpgrade linux-image-oemUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1039-awsUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1104-raspi2Upgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azure | Apr 1, 2019 | Jan 18, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub