In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/card.c.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 11, 2019 | Dec 3, 2018 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Dec 3, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf | May 1, 2019 | Dec 3, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo | Mar 11, 2019 | Dec 3, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jan 16, 2019 | Dec 4, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 3, 2018 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 11, 2019 | Dec 3, 2018 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-default-extra | Dec 12, 2018 | Dec 3, 2018 |
| Ubuntu | — | Upgrade linux-image-oemUpgrade linux-image-4.15.0-1041-azureUpgrade linux-image-4.15.0-1033-raspi2Upgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-1040-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-168-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1035-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-47-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.18.0-1014-azureUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.18.0-1009-kvmUpgrade linux-image-4.4.0-142-powerpc-smpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-47-genericUpgrade linux-image-4.15.0-1010-oracleUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-awsUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-142-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1038-awsUpgrade linux-image-4.15.0-1035-oemUpgrade linux-image-azureUpgrade linux-image-4.4.0-142-powerpc-e500mcUpgrade linux-image-4.4.0-142-generic-lpaeUpgrade linux-image-3.13.0-168-powerpc-e500mcUpgrade linux-image-3.13.0-168-genericUpgrade linux-image-4.4.0-1103-raspi2Upgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1029-gcpUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-47-lowlatencyUpgrade linux-image-4.4.0-142-lowlatencyUpgrade linux-image-3.13.0-168-powerpc64-smpUpgrade linux-image-4.4.0-1107-snapdragonUpgrade linux-image-4.18.0-1012-awsUpgrade linux-image-4.18.0-17-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-3.13.0-168-powerpc64-embUpgrade linux-image-3.13.0-168-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-47-snapdragonUpgrade linux-image-4.18.0-1008-gcpUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-168-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-4.18.0-17-snapdragonUpgrade linux-image-genericUpgrade linux-image-3.13.0-168-powerpc-e500Upgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1075-awsUpgrade linux-image-4.18.0-1011-raspi2Upgrade linux-image-4.18.0-17-genericUpgrade linux-image-4.18.0-17-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-142-powerpc64-embUpgrade linux-image-4.4.0-142-powerpc64-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1031-kvm | Feb 8, 2019 | Dec 3, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub