An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel | Apr 27, 2020 | Dec 17, 2018 |
| Amazon_linux | — | Upgrade kernel | Jan 12, 2019 | Dec 17, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 6, 2019 | Dec 17, 2018 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Dec 17, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-devel | Apr 2, 2019 | Dec 17, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade perf | Mar 27, 2019 | Dec 17, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade python-perf | Apr 3, 2019 | Dec 17, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 31, 2019 | Dec 5, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 17, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 6, 2019 | Dec 17, 2018 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-docs | Jan 19, 2019 | Dec 17, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1047-awsUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1103-raspi2Upgrade linux-image-4.4.0-142-powerpc-e500mcUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-4.4.0-1107-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-4.4.0-1075-awsUpgrade linux-image-4.4.0-142-powerpc64-smpUpgrade linux-image-4.4.0-142-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1040-kvmUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-4.4.0-142-powerpc64-embUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-142-powerpc-smpUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-snapdragonUpgrade linux-image-kvmUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-4.4.0-142-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-azureUpgrade linux-image-oemUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1038-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-4.4.0-142-lowlatency | Feb 8, 2019 | Dec 17, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 17, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub