In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef.
CVSS Details
- CVSS 3.1 Base Score: 4.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 1, 2020 | Dec 3, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade perfUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-tools | Jun 17, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfo | Apr 16, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-devel | Dec 27, 2019 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-sourceUpgrade kernel-develUpgrade bpftool | Jan 3, 2020 | Dec 3, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 7, 2020 | Aug 15, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 1, 2020 | Dec 3, 2019 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-obs-build | Dec 13, 2019 | Dec 3, 2019 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-raspi2Upgrade linux-gke-5.0Upgrade linux-azureUpgrade linux-fipsUpgrade linux-oracleUpgrade linux-kvmUpgrade linux-hweUpgrade linux-azure-fipsUpgrade linux-aws-hweUpgrade linux-snapdragonUpgrade linux-gcpUpgrade linux-oem-osp1Upgrade linux-oemUpgrade linux-lts-xenialUpgrade linux-awsUpgrade linux-gke-4.15Upgrade linux | Nov 19, 2024 | Dec 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub