In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers, aka CID-d9d4b1e46d95. This affects drivers/hid/hid-axff.c, drivers/hid/hid-dr.c, drivers/hid/hid-emsff.c, drivers/hid/hid-gaff.c, drivers/hid/hid-holtekff.c, drivers/hid/hid-lg2ff.c, drivers/hid/hid-lg3ff.c, drivers/hid/hid-lg4ff.c, drivers/hid/hid-lgff.c, drivers/hid/hid-logitech-hidpp.c, drivers/hid/hid-microsoft.c, drivers/hid/hid-sony.c, drivers/hid/hid-tmff.c, and drivers/hid/hid-zpff.c.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 5, 2020 | Dec 3, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perf | Jun 17, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel | Apr 16, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf | Dec 27, 2019 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-sourceUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-develUpgrade kernel | Jan 3, 2020 | Dec 3, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 7, 2020 | Dec 3, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 3, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jun 5, 2020 | Dec 3, 2019 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-default-extra | Dec 18, 2019 | Dec 3, 2019 |
| Ubuntu | — | Upgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-genericUpgrade linux-image-oracle-edgeUpgrade linux-image-azureUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-aws-edgeUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-5.0.0-38-genericUpgrade linux-image-virtualUpgrade linux-image-gke-5.0Upgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-awsUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-5.0.0-1023-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-38-generic-lpae | Jan 8, 2020 | Dec 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub