In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver, aka CID-30a8beeb3042.
CVSS Details
- CVSS 3.1 Base Score: 4.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 24, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-sourceUpgrade python-perfUpgrade perf | Jan 3, 2020 | Dec 3, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 4, 2020 | Aug 2, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 3, 2019 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-default | Dec 18, 2019 | Dec 3, 2019 |
| Ubuntu | — | Upgrade linux-hweUpgrade linux-awsUpgrade linux-kvmUpgrade linux-lts-xenialUpgrade linux-oemUpgrade linux-raspi2Upgrade linux-gcpUpgrade linux-gke-4.15Upgrade linux-oem-osp1Upgrade linux-fipsUpgrade linux-gke-5.0Upgrade linux-aws-hweUpgrade linux-snapdragonUpgrade linux-azure-fipsUpgrade linux-azureUpgrade linux-oracleUpgrade linuxUpgrade linux-aws-fips | Nov 19, 2024 | Dec 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub