gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal '\0' value, which allows attackers to trigger an out-of-bounds read, aka CID-15753588bcd4.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | Jul 4, 2022 | May 18, 2020 |
| Debian | — | Upgrade linux | Jun 11, 2020 | May 18, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools | Jun 17, 2020 | May 18, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernel | Sep 28, 2020 | May 18, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libs | Sep 3, 2020 | May 18, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade python3-perfUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade perf | Jul 31, 2020 | May 18, 2020 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-build | Jun 10, 2020 | May 18, 2020 |
| Ubuntu | — | Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1110-awsUpgrade linux-image-4.15.0-109-genericUpgrade linux-image-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1076-kvmUpgrade linux-image-awsUpgrade linux-image-5.4.0-40-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-185-genericUpgrade linux-image-4.4.0-185-generic-lpaeUpgrade linux-image-5.0.0-1063-oem-osp1Upgrade linux-image-oemUpgrade linux-image-powerpc-e500mcUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1069-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.3.0-62-generic-lpaeUpgrade linux-image-5.3.0-1028-raspi2Upgrade linux-image-5.3.0-1024-kvmUpgrade linux-image-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-109-lowlatencyUpgrade linux-image-4.4.0-1139-snapdragonUpgrade linux-image-4.15.0-1091-oemUpgrade linux-image-5.3.0-62-genericUpgrade linux-image-oracleUpgrade linux-image-4.15.0-107-lowlatencyUpgrade linux-image-gkeop-5.3Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-gke-4.15Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1046-oracleUpgrade linux-image-4.15.0-1077-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-40-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.4.0-40-generic-lpaeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gke-5.3Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-185-powerpc-e500mcUpgrade linux-image-genericUpgrade linux-image-4.4.0-185-powerpc64-embUpgrade linux-image-4.4.0-185-lowlatencyUpgrade linux-image-5.3.0-1030-gkeUpgrade linux-image-4.4.0-1074-awsUpgrade linux-image-4.15.0-107-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.3.0-62-snapdragonUpgrade linux-image-5.4.0-28-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-4.15.0-109-generic-lpaeUpgrade linux-image-5.3.0-62-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-gke-5.0Upgrade linux-image-5.4.0-1013-raspiUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-185-powerpc-smpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1019-gcpUpgrade linux-image-4.15.0-1074-awsUpgrade linux-image-4.15.0-107-generic-lpaeUpgrade linux-image-4.15.0-1048-oracleUpgrade linux-image-4.15.0-1065-raspi2Upgrade linux-image-5.3.0-1028-oracleUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1020-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1081-snapdragonUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.3.0-1030-gcpUpgrade linux-image-5.3.0-1032-azureUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1078-gcpUpgrade linux-image-5.3.0-1030-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1135-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1091-azureUpgrade linux-image-raspiUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-5.4.0-1019-oracleUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-185-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-1043-gkeUpgrade linux-image-4.15.0-1064-gkeUpgrade linux-image-5.4.0-1018-awsUpgrade linux-image-azure | Aug 5, 2020 | May 18, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 18, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub