In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef.
CVSS Details
- CVSS 3.1 Base Score: 4.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 1, 2020 | Dec 3, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debugUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo | Jun 17, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perf | Apr 16, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libs | Dec 27, 2019 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade kernel-develUpgrade python3-perfUpgrade bpftoolUpgrade perfUpgrade kernel-sourceUpgrade kernel-toolsUpgrade kernel-tools-libs | Jan 3, 2020 | Dec 3, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 7, 2020 | Aug 15, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 1, 2020 | Dec 3, 2019 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-devel-azure | Dec 13, 2019 | Dec 3, 2019 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-azureUpgrade linux-raspi2Upgrade linux-oracleUpgrade linux-azure-fipsUpgrade linux-hweUpgrade linux-fipsUpgrade linux-gke-5.0Upgrade linux-gke-4.15Upgrade linux-snapdragonUpgrade linux-lts-xenialUpgrade linux-awsUpgrade linuxUpgrade linux-aws-hweUpgrade linux-oem-osp1Upgrade linux-gcpUpgrade linux-oem | Nov 19, 2024 | Dec 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub