In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers, aka CID-d9d4b1e46d95. This affects drivers/hid/hid-axff.c, drivers/hid/hid-dr.c, drivers/hid/hid-emsff.c, drivers/hid/hid-gaff.c, drivers/hid/hid-holtekff.c, drivers/hid/hid-lg2ff.c, drivers/hid/hid-lg3ff.c, drivers/hid/hid-lg4ff.c, drivers/hid/hid-lgff.c, drivers/hid/hid-logitech-hidpp.c, drivers/hid/hid-microsoft.c, drivers/hid/hid-sony.c, drivers/hid/hid-tmff.c, and drivers/hid/hid-zpff.c.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 5, 2020 | Dec 3, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-debug | Jun 17, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-tools-libs | Apr 16, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-devel | Dec 27, 2019 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-sourceUpgrade kernel-tools-libsUpgrade bpftool | Jan 3, 2020 | Dec 3, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 7, 2020 | Dec 3, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 3, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jun 5, 2020 | Dec 3, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-obs-build | Dec 18, 2019 | Dec 3, 2019 |
| Ubuntu | — | Upgrade linux-image-gke-5.0Upgrade linux-image-5.0.0-38-genericUpgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-oracleUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-gkeUpgrade linux-image-raspi2Upgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-aws-edgeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-genericUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-azureUpgrade linux-image-oracle-edgeUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1024-kvm | Jan 8, 2020 | Dec 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub