An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64 | Apr 27, 2020 | Dec 17, 2018 |
| Amazon_linux | — | Upgrade kernel | Jan 12, 2019 | Dec 17, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 6, 2019 | Dec 17, 2018 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Dec 17, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-debug | Apr 2, 2019 | Dec 17, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade perf | Mar 27, 2019 | Dec 17, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Apr 3, 2019 | Dec 17, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 31, 2019 | Dec 5, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 17, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 6, 2019 | Dec 17, 2018 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-default | Jan 19, 2019 | Dec 17, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-142-powerpc64-embUpgrade linux-image-genericUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-142-powerpc-e500mcUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-4.4.0-142-powerpc64-smpUpgrade linux-image-4.4.0-1075-awsUpgrade linux-image-4.4.0-142-powerpc-smpUpgrade linux-image-4.4.0-142-genericUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-4.4.0-1103-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1040-kvmUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1107-snapdragonUpgrade linux-image-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-powerpc-e500mcUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-142-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-oracleUpgrade linux-image-oemUpgrade linux-image-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-142-lowlatencyUpgrade linux-image-gke-4.15Upgrade linux-image-awsUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-aws-hweUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1038-aws | Feb 8, 2019 | Dec 17, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 17, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub