Buffer overflow in the auerswald_probe function in the Auerswald Linux USB driver for the Linux kernel before 2.6.27 allows physically proximate attackers to execute arbitrary code, cause a denial of service via a crafted USB device, or take full control of the system.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernelUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-headers | Aug 17, 2018 | Oct 20, 2011 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Feb 11, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 11, 2020 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-bigsmpUpgrade kernel-kdumpUpgrade kernel-kdumppaeUpgrade kernel-xenpaeUpgrade kernel-xenUpgrade kernel-vmipaeUpgrade kernel-defaultUpgrade kernel-debugUpgrade kernel-iseries64Upgrade kernel-ppc64Upgrade kernel-vmiUpgrade kernel-smpUpgrade kernel-source | Feb 17, 2015 | Feb 17, 2015 |
| Ubuntu | — | Upgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-hppa32 | Nov 8, 2024 | Feb 11, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub