Heap-based buffer overflow in the wdm_in_callback function in drivers/usb/class/cdc-wdm.c in the Linux kernel before 3.8.4 allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted cdc-wdm USB device.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-docUpgrade kernel-firmwareUpgrade kernel-develUpgrade kernel-debug-develUpgrade perfUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-abi-whitelists | Dec 1, 2016 | Mar 22, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 22, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Mar 22, 2013 |
| Suse | — | Upgrade cluster-network-kmp-defaultUpgrade kernel-default-manUpgrade hyper-v-kmp-paeUpgrade kernel-default-extraUpgrade kernel-xen-baseUpgrade kernel-ppc64-develUpgrade gfs2-kmp-traceUpgrade gfs2-kmp-paeUpgrade ext4dev-kmp-defaultUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-ppc64Upgrade kernel-xen-develUpgrade ocfs2-kmp-paeUpgrade kernel-traceUpgrade btrfs-kmp-paeUpgrade ocfs2-kmp-traceUpgrade ext4dev-kmp-paeUpgrade kernel-xenUpgrade kernel-default-develUpgrade kernel-paeUpgrade cluster-network-kmp-traceUpgrade kernel-pae-baseUpgrade kernel-ec2-develUpgrade kernel-xen-extraUpgrade kernel-trace-develUpgrade xen-kmp-paeUpgrade btrfs-kmp-defaultUpgrade ext4dev-kmp-xenUpgrade kernel-default-baseUpgrade xen-kmp-defaultUpgrade gfs2-kmp-xenUpgrade cluster-network-kmp-ppc64Upgrade kernel-ec2-baseUpgrade ext4dev-kmp-traceUpgrade kernel-ec2Upgrade hyper-v-kmp-defaultUpgrade kernel-defaultUpgrade xen-kmp-traceUpgrade gfs2-kmp-ppc64Upgrade kernel-trace-baseUpgrade kernel-trace-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-pae-extraUpgrade kernel-ppc64-baseUpgrade btrfs-kmp-xenUpgrade hyper-v-kmp-traceUpgrade ocfs2-kmp-ppc64Upgrade ocfs2-kmp-xenUpgrade kernel-pae-develUpgrade gfs2-kmp-defaultUpgrade cluster-network-kmp-xenUpgrade cluster-network-kmp-paeUpgrade sle-hae-release | Feb 17, 2015 | Mar 22, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-41-generic-paeUpgrade linux-image-3.2.0-41-powerpc64-smpUpgrade linux-image-2.6.32-47-sparc64Upgrade linux-image-3.5.0-28-highbankUpgrade linux-image-3.2.0-1430-omap4Upgrade linux-image-3.2.0-41-genericUpgrade linux-image-2.6.32-47-lpiaUpgrade linux-image-2.6.32-47-sparc64-smpUpgrade linux-image-3.5.0-28-powerpc64-smpUpgrade linux-image-2.6.32-47-386Upgrade linux-image-2.6.32-352-ec2Upgrade linux-image-2.6.32-47-preemptUpgrade linux-image-3.5.0-28-genericUpgrade linux-image-2.6.32-47-versatileUpgrade linux-image-2.6.32-47-generic-paeUpgrade linux-image-3.2.0-41-powerpc-smpUpgrade linux-image-2.6.32-47-powerpcUpgrade linux-image-3.5.0-28-omapUpgrade linux-image-2.6.32-47-ia64Upgrade linux-image-2.6.32-47-virtualUpgrade linux-image-2.6.32-47-powerpc64-smpUpgrade linux-image-2.6.32-47-serverUpgrade linux-image-3.2.0-41-highbankUpgrade linux-image-3.2.0-41-virtualUpgrade linux-image-2.6.32-47-genericUpgrade linux-image-3.5.0-28-powerpc-smpUpgrade linux-image-3.5.0-223-omap4Upgrade linux-image-3.2.0-41-omapUpgrade linux-image-2.6.32-47-powerpc-smp | Nov 8, 2024 | Mar 22, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub