ISOMAN

CVE

CVE-2018-20169

An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.

Severity
MEDIUM
CVSS
6.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=704620afc70cf47abb9d6a1a57f3825d2bca49cf
  2. https://access.redhat.com/errata/RHSA-2019:3309
  3. https://access.redhat.com/errata/RHSA-2019:3517
  4. https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.9
  5. https://github.com/torvalds/linux/commit/704620afc70cf47abb9d6a1a57f3825d2bca49cf
  6. https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html
  7. https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html
  8. https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html
  9. https://usn.ubuntu.com/3879-1/
  10. https://usn.ubuntu.com/3879-2/
  11. https://usn.ubuntu.com/4094-1/
  12. https://usn.ubuntu.com/4118-1/
  13. http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=704620afc70cf47abb9d6a1a57f3825d2bca49cf
  14. https://access.redhat.com/errata/RHSA-2019:3309
  15. https://access.redhat.com/errata/RHSA-2019:3517
  16. https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.9
  17. https://github.com/torvalds/linux/commit/704620afc70cf47abb9d6a1a57f3825d2bca49cf
  18. https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html
  19. https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html
  20. https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html