In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/card.c.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Sep 11, 2019 | Dec 3, 2018 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Dec 3, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-headers | May 1, 2019 | Dec 3, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade python-perfUpgrade kernel-headers | Mar 11, 2019 | Dec 3, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jan 16, 2019 | Dec 4, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 3, 2018 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 11, 2019 | Dec 3, 2018 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-obs-build | Dec 12, 2018 | Dec 3, 2018 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-3.13.0-168-powerpc-e500Upgrade linux-image-4.18.0-17-lowlatencyUpgrade linux-image-4.18.0-17-snapdragonUpgrade linux-image-3.13.0-168-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-oracleUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-4.18.0-1012-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-168-generic-lpaeUpgrade linux-image-3.13.0-168-powerpc64-embUpgrade linux-image-4.4.0-142-powerpc64-embUpgrade linux-image-4.15.0-47-snapdragonUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-142-lowlatencyUpgrade linux-image-4.4.0-1107-snapdragonUpgrade linux-image-4.4.0-1075-awsUpgrade linux-image-virtualUpgrade linux-image-3.13.0-168-powerpc64-smpUpgrade linux-image-4.15.0-47-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-142-powerpc64-smpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-4.15.0-1029-gcpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.18.0-1008-gcpUpgrade linux-image-4.18.0-17-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.18.0-1011-raspi2Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1031-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-4.18.0-17-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-142-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-3.13.0-168-genericUpgrade linux-image-azureUpgrade linux-image-4.4.0-1103-raspi2Upgrade linux-image-4.4.0-142-powerpc-e500mcUpgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-142-generic-lpaeUpgrade linux-image-4.15.0-1035-oemUpgrade linux-image-3.13.0-168-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1038-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-4.4.0-142-powerpc-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-4.4.0-1040-kvmUpgrade linux-image-powerpc-e500Upgrade linux-image-4.15.0-47-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1033-raspi2Upgrade linux-image-4.18.0-1009-kvmUpgrade linux-image-3.13.0-168-powerpc-e500mcUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1010-oracleUpgrade linux-image-4.15.0-47-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.18.0-1014-azureUpgrade linux-image-4.15.0-1041-azureUpgrade linux-image-4.15.0-1035-aws | Feb 8, 2019 | Dec 3, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub