In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/card.c.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 11, 2019 | Dec 3, 2018 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Dec 3, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64 | May 1, 2019 | Dec 3, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-devel | Mar 11, 2019 | Dec 3, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jan 16, 2019 | Dec 4, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 3, 2018 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 11, 2019 | Dec 3, 2018 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-default-man | Dec 12, 2018 | Dec 3, 2018 |
| Ubuntu | — | Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.18.0-1011-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-4.18.0-17-lowlatencyUpgrade linux-image-4.15.0-47-snapdragonUpgrade linux-image-kvmUpgrade linux-image-4.4.0-142-lowlatencyUpgrade linux-image-4.4.0-142-powerpc64-smpUpgrade linux-image-4.15.0-1031-kvmUpgrade linux-image-gkeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-3.13.0-168-powerpc64-embUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1029-gcpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-3.13.0-168-powerpc-e500Upgrade linux-image-raspi2Upgrade linux-image-4.18.0-1008-gcpUpgrade linux-image-4.4.0-1107-snapdragonUpgrade linux-image-3.13.0-168-generic-lpaeUpgrade linux-image-4.18.0-17-genericUpgrade linux-image-4.4.0-142-powerpc64-embUpgrade linux-image-4.18.0-17-generic-lpaeUpgrade linux-image-4.18.0-17-snapdragonUpgrade linux-image-3.13.0-168-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-168-powerpc64-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.18.0-1012-awsUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-4.15.0-47-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1075-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1035-oemUpgrade linux-image-3.13.0-168-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-4.15.0-1010-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-142-powerpc-e500mcUpgrade linux-image-4.15.0-47-generic-lpaeUpgrade linux-image-4.15.0-1033-raspi2Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1041-azureUpgrade linux-image-3.13.0-168-genericUpgrade linux-image-4.4.0-1103-raspi2Upgrade linux-image-4.18.0-1009-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-142-powerpc-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1040-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.15.0-47-genericUpgrade linux-image-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1035-awsUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500Upgrade linux-image-4.18.0-1014-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-142-genericUpgrade linux-image-azureUpgrade linux-image-3.13.0-168-lowlatencyUpgrade linux-image-4.4.0-142-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1038-aws | Feb 8, 2019 | Dec 3, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub