gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal '\0' value, which allows attackers to trigger an out-of-bounds read, aka CID-15753588bcd4.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-tools | Jul 4, 2022 | May 18, 2020 |
| Debian | — | Upgrade linux | Jun 11, 2020 | May 18, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Jun 17, 2020 | May 18, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Sep 28, 2020 | May 18, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-devel | Sep 3, 2020 | May 18, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-sourceUpgrade kernel-toolsUpgrade python-perfUpgrade python3-perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel | Jul 31, 2020 | May 18, 2020 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade cluster-md-kmp-default | Jun 10, 2020 | May 18, 2020 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1076-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.3.0-62-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-185-generic-lpaeUpgrade linux-image-5.4.0-40-genericUpgrade linux-image-4.15.0-107-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-1110-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-185-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-gkeUpgrade linux-image-5.3.0-1024-kvmUpgrade linux-image-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-109-lowlatencyUpgrade linux-image-5.3.0-62-genericUpgrade linux-image-snapdragonUpgrade linux-image-5.0.0-1063-oem-osp1Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gke-5.3Upgrade linux-image-4.15.0-1091-oemUpgrade linux-image-5.4.0-40-lowlatencyUpgrade linux-image-4.15.0-1077-awsUpgrade linux-image-4.15.0-1069-kvmUpgrade linux-image-kvmUpgrade linux-image-gke-4.15Upgrade linux-image-gkeop-5.3Upgrade linux-image-4.4.0-1139-snapdragonUpgrade linux-image-5.4.0-40-generic-lpaeUpgrade linux-image-4.15.0-1046-oracleUpgrade linux-image-4.15.0-109-genericUpgrade linux-image-5.3.0-1028-raspi2Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-1074-awsUpgrade linux-image-4.4.0-185-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-gcpUpgrade linux-image-4.4.0-185-powerpc-smpUpgrade linux-image-5.3.0-1028-oracleUpgrade linux-image-5.4.0-1020-azureUpgrade linux-image-4.4.0-185-lowlatencyUpgrade linux-image-gke-5.0Upgrade linux-image-5.4.0-1013-raspiUpgrade linux-image-4.4.0-185-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-109-generic-lpaeUpgrade linux-image-5.0.0-1043-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1048-oracleUpgrade linux-image-4.15.0-1091-azureUpgrade linux-image-5.3.0-1030-awsUpgrade linux-image-raspiUpgrade linux-image-4.15.0-107-genericUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.4.0-1019-oracleUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1078-gcpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1081-snapdragonUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-28-genericUpgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1074-awsUpgrade linux-image-5.4.0-1019-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.3.0-1030-gcpUpgrade linux-image-4.4.0-185-powerpc64-smpUpgrade linux-image-5.3.0-62-snapdragonUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1135-raspi2Upgrade linux-image-4.15.0-1065-raspi2Upgrade linux-image-4.15.0-107-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1018-awsUpgrade linux-image-oem-osp1Upgrade linux-image-5.3.0-1032-azureUpgrade linux-image-4.15.0-1064-gkeUpgrade linux-image-5.3.0-62-lowlatencyUpgrade linux-image-5.3.0-1030-gke | Aug 5, 2020 | May 18, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 18, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub