In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer, aka CID-303911cfc5b9. This affects drivers/usb/core/file.c.
CVSS Details
- CVSS 3.1 Base Score: 4.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Dec 3, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 1, 2020 | Dec 3, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade perf | Jun 17, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-tools | Apr 16, 2020 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-devel | Dec 27, 2019 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade kernel-sourceUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade python3-perfUpgrade kernelUpgrade kernel-headers | Jan 3, 2020 | Dec 3, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 4, 2020 | Aug 12, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 1, 2020 | Dec 3, 2019 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-obs-build | Dec 18, 2019 | Dec 3, 2019 |
| Ubuntu | — | Upgrade linux-gke-4.15Upgrade linux-oem-osp1Upgrade linux-azureUpgrade linux-oemUpgrade linuxUpgrade linux-gcpUpgrade linux-awsUpgrade linux-lts-xenialUpgrade linux-gke-5.0Upgrade linux-hweUpgrade linux-kvmUpgrade linux-snapdragonUpgrade linux-azure-fipsUpgrade linux-fipsUpgrade linux-aws-fipsUpgrade linux-raspi2Upgrade linux-aws-hweUpgrade linux-oracle | Nov 19, 2024 | Dec 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub