An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver because drivers/media/radio/radio-raremono.c does not properly allocate memory.
CVSS Details
- CVSS 3.1 Base Score: 4.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Sep 16, 2019 | Aug 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-sourceUpgrade kernel-toolsUpgrade python-perf | Mar 23, 2020 | Aug 19, 2019 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-defaultUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade kernel-default-extra | Sep 21, 2019 | Aug 19, 2019 |
| Ubuntu | — | Upgrade linux-image-5.0.0-1018-awsUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-4.4.0-1123-raspi2Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-1059-kvmUpgrade linux-image-4.4.0-165-generic-lpaeUpgrade linux-image-4.15.0-60-genericUpgrade linux-image-oemUpgrade linux-image-5.0.0-1020-gcpUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-165-powerpc-e500mcUpgrade linux-image-4.4.0-165-powerpc64-smpUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-5.0.0-1019-raspi2Upgrade linux-image-4.4.0-165-genericUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1095-awsUpgrade linux-image-5.0.0-1023-snapdragonUpgrade linux-image-aws-hweUpgrade linux-image-azureUpgrade linux-image-4.4.0-165-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-4.4.0-165-lowlatencyUpgrade linux-image-5.0.0-1019-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1127-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.0.0-1020-gkeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.0.0-31-genericUpgrade linux-image-5.0.0-31-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-165-powerpc64-embUpgrade linux-image-lowlatencyUpgrade linux-image-awsUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-5.0.0-1022-azureUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc-smpUpgrade linux-image-gke-5.0Upgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-5.0.0-31-lowlatencyUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1041-gcp | Sep 3, 2019 | Aug 19, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub