In parse_hid_report_descriptor in drivers/input/tablet/gtco.c in the Linux kernel through 5.2.1, a malicious USB device can send an HID report that triggers an out-of-bounds write during generation of debugging messages.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-zfcpdumpUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-headersUpgrade perfUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-rt-modules | May 31, 2024 | Jul 17, 2019 |
| Debian | — | Upgrade linux | Aug 14, 2019 | Jul 17, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-debugUpgrade python-perfUpgrade perfUpgrade kernel-debuginfo | Dec 4, 2019 | Jul 17, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libs | Nov 19, 2019 | Jul 17, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade perfUpgrade kernel-devel | Sep 12, 2019 | Jul 17, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-develUpgrade perf | Mar 23, 2020 | Jul 17, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 9, 2019 | Jul 11, 2019 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 23, 2024 | Jul 17, 2019 |
| Rocky_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-rt-debugUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-kvmUpgrade perfUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headers | Jun 17, 2024 | Jul 17, 2019 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-ec2Upgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-ec2-develUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-ec2-extra | Aug 8, 2019 | Jul 17, 2019 |
| Ubuntu | — | Upgrade linux-image-4.4.0-165-powerpc64-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-gcpUpgrade linux-image-powerpc64-embUpgrade linux-image-5.0.0-1020-gcpUpgrade linux-image-4.4.0-165-lowlatencyUpgrade linux-image-4.4.0-165-powerpc-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1047-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-awsUpgrade linux-image-5.0.0-1020-gkeUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.0.0-31-lowlatencyUpgrade linux-image-5.0.0-1022-azureUpgrade linux-image-genericUpgrade linux-image-4.4.0-165-powerpc64-embUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-4.4.0-1095-awsUpgrade linux-image-gkeUpgrade linux-image-5.0.0-1019-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1056-azureUpgrade linux-image-kvmUpgrade linux-image-gke-5.0Upgrade linux-image-4.4.0-1123-raspi2Upgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-5.0.0-31-generic-lpaeUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-5.0.0-31-genericUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-165-powerpc-e500mcUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gke-4.15Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-1127-snapdragonUpgrade linux-image-5.0.0-1019-raspi2Upgrade linux-image-raspi2Upgrade linux-image-azureUpgrade linux-image-4.4.0-165-generic-lpaeUpgrade linux-image-5.0.0-1023-snapdragonUpgrade linux-image-4.15.0-60-genericUpgrade linux-image-4.4.0-165-genericUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-4.4.0-1059-kvmUpgrade linux-image-5.0.0-1018-aws | Sep 3, 2019 | Jul 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub