In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef.
CVSS Details
- CVSS 3.1 Base Score: 4.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 1, 2020 | Dec 3, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debugUpgrade perfUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-libs | Jun 17, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headers | Apr 16, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade python-perf | Dec 27, 2019 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-sourceUpgrade python3-perf | Jan 3, 2020 | Dec 3, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 7, 2020 | Aug 15, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 1, 2020 | Dec 3, 2019 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-azure-base | Dec 13, 2019 | Dec 3, 2019 |
| Ubuntu | — | Upgrade linux-oracleUpgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-fipsUpgrade linux-azureUpgrade linux-hweUpgrade linux-gke-5.0Upgrade linux-azure-fipsUpgrade linux-raspi2Upgrade linux-oem-osp1Upgrade linux-gcpUpgrade linux-awsUpgrade linux-oemUpgrade linux-snapdragonUpgrade linux-gke-4.15Upgrade linux-aws-hweUpgrade linuxUpgrade linux-lts-xenial | Nov 19, 2024 | Dec 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub