In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers, aka CID-d9d4b1e46d95. This affects drivers/hid/hid-axff.c, drivers/hid/hid-dr.c, drivers/hid/hid-emsff.c, drivers/hid/hid-gaff.c, drivers/hid/hid-holtekff.c, drivers/hid/hid-lg2ff.c, drivers/hid/hid-lg3ff.c, drivers/hid/hid-lg4ff.c, drivers/hid/hid-lgff.c, drivers/hid/hid-logitech-hidpp.c, drivers/hid/hid-microsoft.c, drivers/hid/hid-sony.c, drivers/hid/hid-tmff.c, and drivers/hid/hid-zpff.c.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 5, 2020 | Dec 3, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perf | Jun 17, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade perfUpgrade python-perfUpgrade kernel-tools | Apr 16, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernelUpgrade kernel-devel | Dec 27, 2019 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade kernel-headersUpgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade kernel-sourceUpgrade kernel-tools-libsUpgrade python-perf | Jan 3, 2020 | Dec 3, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 7, 2020 | Dec 3, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 3, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jun 5, 2020 | Dec 3, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docs | Dec 18, 2019 | Dec 3, 2019 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-5.0.0-1028-azureUpgrade linux-image-genericUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-oracle-edgeUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-gke-5.0Upgrade linux-image-5.0.0-1023-awsUpgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-aws-edgeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-38-genericUpgrade linux-image-gkeUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-aws | Jan 8, 2020 | Dec 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub