vulnerability

Red Hat: CVE-2018-20169: missing size check in the __usb_get_extra_descriptor() leading to DoS (Multiple Advisories)

Try Surface Command
Back to search
Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
Dec 17, 2018
Added
Nov 6, 2019
Modified
Aug 11, 2025

Description

An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.

Solutions

redhat-upgrade-kernelredhat-upgrade-kernel-rt

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today