In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver, aka CID-30a8beeb3042.
CVSS Details
- CVSS 3.1 Base Score: 4.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 24, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-sourceUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perfUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-headers | Jan 3, 2020 | Dec 3, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 4, 2020 | Aug 2, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 3, 2019 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-obs-build | Dec 18, 2019 | Dec 3, 2019 |
| Ubuntu | — | Upgrade linux-fipsUpgrade linux-gke-4.15Upgrade linux-gcpUpgrade linux-kvmUpgrade linux-awsUpgrade linux-gke-5.0Upgrade linux-oemUpgrade linux-oem-osp1Upgrade linux-raspi2Upgrade linux-hweUpgrade linux-lts-xenialUpgrade linux-azure-fipsUpgrade linuxUpgrade linux-snapdragonUpgrade linux-aws-fipsUpgrade linux-aws-hweUpgrade linux-azureUpgrade linux-oracle | Nov 19, 2024 | Dec 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub