An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-headers | Apr 27, 2020 | Dec 17, 2018 |
| Amazon_linux | — | Upgrade kernel | Jan 12, 2019 | Dec 17, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 6, 2019 | Dec 17, 2018 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Dec 17, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-devel | Apr 2, 2019 | Dec 17, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo | Mar 27, 2019 | Dec 17, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade perf | Apr 3, 2019 | Dec 17, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 31, 2019 | Dec 5, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 17, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 6, 2019 | Dec 17, 2018 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-source-azureUpgrade kernel-devel-azure | Jan 19, 2019 | Dec 17, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-4.4.0-1075-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-4.4.0-142-genericUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-gcpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-142-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-4.4.0-1040-kvmUpgrade linux-image-4.4.0-142-powerpc64-embUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-4.4.0-1103-raspi2Upgrade linux-image-4.4.0-1107-snapdragonUpgrade linux-image-4.4.0-142-powerpc64-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-4.4.0-142-powerpc-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-142-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-oemUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-58-genericUpgrade linux-image-4.4.0-1038-awsUpgrade linux-image-gke-4.15Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-142-lowlatencyUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-kvmUpgrade linux-image-snapdragon | Feb 8, 2019 | Dec 17, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 17, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub