An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools | Apr 27, 2020 | Dec 17, 2018 |
| Amazon_linux | — | Upgrade kernel | Jan 12, 2019 | Dec 17, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 6, 2019 | Dec 17, 2018 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Dec 17, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-tools-libs | Apr 2, 2019 | Dec 17, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade perf | Mar 27, 2019 | Dec 17, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perf | Apr 3, 2019 | Dec 17, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 31, 2019 | Dec 5, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 17, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 6, 2019 | Dec 17, 2018 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-azure-base | Jan 19, 2019 | Dec 17, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-142-powerpc64-embUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-4.4.0-142-powerpc-smpUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-4.4.0-1075-awsUpgrade linux-image-4.4.0-1103-raspi2Upgrade linux-image-4.15.0-1047-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1040-kvmUpgrade linux-image-genericUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-virtualUpgrade linux-image-4.4.0-142-powerpc-e500mcUpgrade linux-image-4.4.0-142-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-4.4.0-142-genericUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1107-snapdragonUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-aws | Feb 8, 2019 | Dec 17, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 17, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub