In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/card.c.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 11, 2019 | Dec 3, 2018 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Dec 3, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64 | May 1, 2019 | Dec 3, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade perf | Mar 11, 2019 | Dec 3, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jan 16, 2019 | Dec 4, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 3, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 11, 2019 | Dec 3, 2018 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-default-man | Dec 12, 2018 | Dec 3, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1033-raspi2Upgrade linux-image-3.13.0-168-powerpc-e500mcUpgrade linux-image-4.4.0-142-powerpc-smpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-142-powerpc-e500mcUpgrade linux-image-3.13.0-168-genericUpgrade linux-image-4.15.0-1035-oemUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1103-raspi2Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1035-awsUpgrade linux-image-4.18.0-1014-azureUpgrade linux-image-4.4.0-142-generic-lpaeUpgrade linux-image-4.4.0-142-genericUpgrade linux-image-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1010-oracleUpgrade linux-image-3.13.0-168-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1041-azureUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.18.0-1009-kvmUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lts-trustyUpgrade linux-image-oemUpgrade linux-image-4.4.0-1040-kvmUpgrade linux-image-4.15.0-47-genericUpgrade linux-image-powerpc-e500Upgrade linux-image-awsUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1038-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-47-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-142-powerpc64-smpUpgrade linux-image-4.18.0-1011-raspi2Upgrade linux-image-3.13.0-168-powerpc-e500Upgrade linux-image-3.13.0-168-powerpc64-embUpgrade linux-image-3.13.0-168-powerpc64-smpUpgrade linux-image-4.4.0-142-powerpc64-embUpgrade linux-image-4.18.0-1012-awsUpgrade linux-image-virtualUpgrade linux-image-4.15.0-47-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1107-snapdragonUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-3.13.0-168-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-powerpc-smpUpgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-47-snapdragonUpgrade linux-image-4.15.0-1029-gcpUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.18.0-17-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1075-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-3.13.0-168-powerpc-smpUpgrade linux-image-4.18.0-17-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-142-lowlatencyUpgrade linux-image-4.18.0-17-genericUpgrade linux-image-4.18.0-17-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-4.18.0-1008-gcpUpgrade linux-image-4.15.0-1031-kvm | Feb 8, 2019 | Dec 3, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub