NetSight
IP …
medium6.8

CVE-2018-20169

An issue was discovered in the Linux kernel before 4.19.9.

Impact

An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.16.63
from 3.17 before 3.18.129
from 3.19 before 4.4.167
from 4.5 before 4.9.145
from 4.10 before 4.14.88
from 4.15 before 4.19.9
CanonicalUbuntu Linux
Versions 14.04, 16.04
DebianDebian Linux
Version 8.0

Weakness classification

CWE-400

References