In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef.
CVSS Details
- CVSS 3.1 Base Score: 4.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 1, 2020 | Dec 3, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-develUpgrade perf | Jun 17, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Apr 16, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libs | Dec 27, 2019 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernel-sourceUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernelUpgrade kernel-headers | Jan 3, 2020 | Dec 3, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 7, 2020 | Aug 15, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 1, 2020 | Dec 3, 2019 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-obs-build | Dec 13, 2019 | Dec 3, 2019 |
| Ubuntu | — | Upgrade linux-azure-fipsUpgrade linux-raspi2Upgrade linux-hweUpgrade linux-gke-5.0Upgrade linux-fipsUpgrade linux-azureUpgrade linux-aws-fipsUpgrade linux-oracleUpgrade linux-kvmUpgrade linux-gcpUpgrade linux-oem-osp1Upgrade linuxUpgrade linux-gke-4.15Upgrade linux-lts-xenialUpgrade linux-oemUpgrade linux-awsUpgrade linux-aws-hweUpgrade linux-snapdragon | Nov 19, 2024 | Dec 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub