In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver, aka CID-30a8beeb3042.
CVSS Details
- CVSS 3.1 Base Score: 4.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 24, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-sourceUpgrade python3-perfUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Jan 3, 2020 | Dec 3, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 4, 2020 | Aug 2, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 3, 2019 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-obs-build | Dec 18, 2019 | Dec 3, 2019 |
| Ubuntu | — | Upgrade linux-gcpUpgrade linux-gke-5.0Upgrade linux-kvmUpgrade linux-hweUpgrade linux-oemUpgrade linux-raspi2Upgrade linux-gke-4.15Upgrade linux-fipsUpgrade linux-awsUpgrade linux-oem-osp1Upgrade linux-lts-xenialUpgrade linux-azureUpgrade linuxUpgrade linux-aws-fipsUpgrade linux-snapdragonUpgrade linux-azure-fipsUpgrade linux-aws-hweUpgrade linux-oracle | Nov 19, 2024 | Dec 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub