In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef.
CVSS Details
- CVSS 3.1 Base Score: 4.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 1, 2020 | Dec 3, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel | Jun 17, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Apr 16, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel | Dec 27, 2019 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-sourceUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade bpftoolUpgrade perfUpgrade kernel-headersUpgrade kernel | Jan 3, 2020 | Dec 3, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 7, 2020 | Aug 15, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 1, 2020 | Dec 3, 2019 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-source-azure | Dec 13, 2019 | Dec 3, 2019 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linux-azure-fipsUpgrade linux-hweUpgrade linux-gke-5.0Upgrade linux-fipsUpgrade linux-oracleUpgrade linux-aws-fipsUpgrade linux-raspi2Upgrade linux-azureUpgrade linux-aws-hweUpgrade linuxUpgrade linux-gcpUpgrade linux-awsUpgrade linux-snapdragonUpgrade linux-oem-osp1Upgrade linux-gke-4.15Upgrade linux-lts-xenialUpgrade linux-oem | Nov 19, 2024 | Dec 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub