An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-devel | Apr 27, 2020 | Dec 17, 2018 |
| Amazon_linux | — | Upgrade kernel | Jan 12, 2019 | Dec 17, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 6, 2019 | Dec 17, 2018 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Dec 17, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libs | Apr 2, 2019 | Dec 17, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs | Mar 27, 2019 | Dec 17, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel | Apr 3, 2019 | Dec 17, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 31, 2019 | Dec 5, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 17, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 6, 2019 | Dec 17, 2018 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-devel-azure | Jan 19, 2019 | Dec 17, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-142-genericUpgrade linux-image-4.4.0-1040-kvmUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1103-raspi2Upgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-raspi2Upgrade linux-image-4.4.0-142-powerpc64-smpUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-4.4.0-1075-awsUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.4.0-142-powerpc-e500mcUpgrade linux-image-4.4.0-142-powerpc-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-generic-lts-xenialUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1107-snapdragonUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-4.4.0-142-powerpc64-embUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-gke-4.15Upgrade linux-image-snapdragonUpgrade linux-image-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-142-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-142-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-oracleUpgrade linux-image-oemUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1038-awsUpgrade linux-image-lowlatency-lts-xenial | Feb 8, 2019 | Dec 17, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 17, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub