In the Linux kernel before 5.3.11, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcba_usb.c driver, aka CID-4d6636498c41.
CVSS Details
- CVSS 3.1 Base Score: 6.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-sourceUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headers | Jan 3, 2020 | Dec 3, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 3, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-docs | Dec 13, 2019 | Dec 3, 2019 |
| Ubuntu | — | Upgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-5.3.0-26-generic-lpaeUpgrade linux-image-5.3.0-1011-gcpUpgrade linux-image-4.15.0-1057-awsUpgrade linux-image-4.15.0-1066-azureUpgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-4.15.0-74-lowlatencyUpgrade linux-image-genericUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-4.15.0-1052-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1031-oracleUpgrade linux-image-5.3.0-26-lowlatencyUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-5.3.0-26-snapdragonUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1053-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.3.0-1009-kvmUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1070-snapdragonUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.3.0-1015-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcp-edgeUpgrade linux-image-azure-edgeUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1050-gkeUpgrade linux-image-5.3.0-26-genericUpgrade linux-image-gke-5.0Upgrade linux-image-4.15.0-74-genericUpgrade linux-image-4.15.0-1052-gcpUpgrade linux-image-4.15.0-1066-oemUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-4.15.0-74-generic-lpaeUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-oracleUpgrade linux-image-oracle-edgeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.3.0-1009-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.0.0-38-genericUpgrade linux-image-5.3.0-1009-awsUpgrade linux-image-oem-osp1Upgrade linux-image-5.3.0-1010-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.3.0-1008-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-oemUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws-edge | Jan 8, 2020 | Dec 3, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub