In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver, aka CID-30a8beeb3042.
CVSS Details
- CVSS 3.1 Base Score: 4.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 24, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-sourceUpgrade kernel-tools-libs | Jan 3, 2020 | Dec 3, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 4, 2020 | Aug 2, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 3, 2019 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-default | Dec 18, 2019 | Dec 3, 2019 |
| Ubuntu | — | Upgrade linux-snapdragonUpgrade linuxUpgrade linux-oracleUpgrade linux-azure-fipsUpgrade linux-aws-fipsUpgrade linux-azureUpgrade linux-aws-hweUpgrade linux-kvmUpgrade linux-gke-4.15Upgrade linux-fipsUpgrade linux-lts-xenialUpgrade linux-gke-5.0Upgrade linux-hweUpgrade linux-awsUpgrade linux-oem-osp1Upgrade linux-gcpUpgrade linux-oemUpgrade linux-raspi2 | Nov 19, 2024 | Dec 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub