In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver, aka CID-30a8beeb3042.
CVSS Details
- CVSS 3.1 Base Score: 4.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 24, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-headersUpgrade kernel | Jan 3, 2020 | Dec 3, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 4, 2020 | Aug 2, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 3, 2019 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-docs | Dec 18, 2019 | Dec 3, 2019 |
| Ubuntu | — | Upgrade linux-oemUpgrade linux-gke-5.0Upgrade linux-gcpUpgrade linux-hweUpgrade linux-gke-4.15Upgrade linux-lts-xenialUpgrade linux-awsUpgrade linux-kvmUpgrade linux-raspi2Upgrade linux-fipsUpgrade linux-oem-osp1Upgrade linux-aws-fipsUpgrade linux-snapdragonUpgrade linux-oracleUpgrade linux-azure-fipsUpgrade linux-aws-hweUpgrade linuxUpgrade linux-azure | Nov 19, 2024 | Dec 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub