CVE-2018-20169
Description
An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.
Risk Information
Base Score
6.8
MODERATE
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.111
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Linux kernel (USN-3641-1) linux-image-generic-lts-xenial_4.4.0.142.122_i386.deb | Linux |
| Linux kernel (USN-3641-1) linux-image-generic-lts-xenial_4.4.0.142.122_amd64.deb | Linux |
| Linux kernel (USN-3641-1) linux-image-lowlatency-lts-xenial_4.4.0.142.122_i386.deb | Linux |
| Linux kernel (USN-3641-1) linux-image-lowlatency-lts-xenial_4.4.0.142.122_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3654-2) linux-image-generic-lts-xenial_4.4.0.142.122_i386.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3654-2) linux-image-generic-lts-xenial_4.4.0.142.122_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3654-2) linux-image-lowlatency-lts-xenial_4.4.0.142.122_i386.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3654-2) linux-image-lowlatency-lts-xenial_4.4.0.142.122_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3676-2) linux-image-generic-lts-xenial_4.4.0.142.122_i386.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3676-2) linux-image-generic-lts-xenial_4.4.0.142.122_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3676-2) linux-image-lowlatency-lts-xenial_4.4.0.142.122_i386.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3676-2) linux-image-lowlatency-lts-xenial_4.4.0.142.122_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3696-2) linux-image-generic-lts-xenial_4.4.0.142.122_i386.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3696-2) linux-image-generic-lts-xenial_4.4.0.142.122_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3696-2) linux-image-lowlatency-lts-xenial_4.4.0.142.122_i386.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3696-2) linux-image-lowlatency-lts-xenial_4.4.0.142.122_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3741-2) linux-image-generic-lts-xenial_4.4.0.142.122_i386.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3741-2) linux-image-generic-lts-xenial_4.4.0.142.122_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3741-2) linux-image-lowlatency-lts-xenial_4.4.0.142.122_i386.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3741-2) linux-image-lowlatency-lts-xenial_4.4.0.142.122_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3753-2) linux-image-generic-lts-xenial_4.4.0.142.122_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3753-2) linux-image-generic-lts-xenial_4.4.0.142.122_i386.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3753-2) linux-image-lowlatency-lts-xenial_4.4.0.142.122_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3753-2) linux-image-lowlatency-lts-xenial_4.4.0.142.122_i386.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3776-2) linux-image-generic-lts-xenial_4.4.0.142.122_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3776-2) linux-image-generic-lts-xenial_4.4.0.142.122_i386.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3776-2) linux-image-lowlatency-lts-xenial_4.4.0.142.122_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3776-2) linux-image-lowlatency-lts-xenial_4.4.0.142.122_i386.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3797-2) linux-image-generic-lts-xenial_4.4.0.142.122_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3797-2) linux-image-generic-lts-xenial_4.4.0.142.122_i386.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3797-2) linux-image-lowlatency-lts-xenial_4.4.0.142.122_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3797-2) linux-image-lowlatency-lts-xenial_4.4.0.142.122_i386.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3821-2) linux-image-generic-lts-xenial_4.4.0.142.122_i386.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3821-2) linux-image-generic-lts-xenial_4.4.0.142.122_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3821-2) linux-image-lowlatency-lts-xenial_4.4.0.142.122_i386.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3821-2) linux-image-lowlatency-lts-xenial_4.4.0.142.122_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3848-2) linux-image-generic-lts-xenial_4.4.0.142.122_i386.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3848-2) linux-image-generic-lts-xenial_4.4.0.142.122_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3848-2) linux-image-lowlatency-lts-xenial_4.4.0.142.122_i386.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3848-2) linux-image-lowlatency-lts-xenial_4.4.0.142.122_amd64.deb | Linux |
| Linux kernel (USN-3879-1) linux-image-aws_4.4.0.1075.77_amd64.deb | Linux |
| Linux kernel (USN-3879-1) linux-image-kvm_4.4.0.1040.39_amd64.deb | Linux |
| Linux kernel (USN-3879-1) linux-image-generic_4.4.0.142.148_i386.deb | Linux |
| Linux kernel (USN-3879-1) linux-image-generic_4.4.0.142.148_amd64.deb | Linux |
| Linux kernel (USN-3879-1) linux-image-lowlatency_4.4.0.142.148_i386.deb | Linux |
| Linux kernel (USN-3879-1) linux-image-lowlatency_4.4.0.142.148_amd64.deb | Linux |
| Linux kernel (USN-3879-1) linux-image-4.4.0-1040-kvm_4.4.0-1040.46_amd64.deb | Linux |
| Linux kernel (USN-3879-1) linux-image-4.4.0-1075-aws_4.4.0-1075.85_amd64.deb | Linux |
| Linux kernel (USN-3879-1) linux-image-4.4.0-142-generic_4.4.0-142.168_i386.deb | Linux |
| Linux kernel (USN-3879-1) linux-image-4.4.0-142-generic_4.4.0-142.168_amd64.deb | Linux |
| Linux kernel (USN-3879-1) linux-image-4.4.0-142-lowlatency_4.4.0-142.168_i386.deb | Linux |
| Linux kernel (USN-3879-1) linux-image-4.4.0-142-lowlatency_4.4.0-142.168_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3879-2) linux-image-aws_4.4.0.1038.38_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3879-2) linux-image-4.4.0-1038-aws_4.4.0-1038.41_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3879-2) linux-image-4.4.0-142-generic_4.4.0-142.168~14.04.1_i386.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3879-2) linux-image-4.4.0-142-generic_4.4.0-142.168~14.04.1_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3879-2) linux-image-generic-lts-xenial_4.4.0.142.122_i386.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3879-2) linux-image-generic-lts-xenial_4.4.0.142.122_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3879-2) linux-image-4.4.0-142-lowlatency_4.4.0-142.168~14.04.1_i386.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3879-2) linux-image-4.4.0-142-lowlatency_4.4.0-142.168~14.04.1_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3879-2) linux-image-lowlatency-lts-xenial_4.4.0.142.122_i386.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-3879-2) linux-image-lowlatency-lts-xenial_4.4.0.142.122_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-gcp_4.15.0.1040.42_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-gcp_4.15.0.1040.54_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-gke_4.15.0.1040.43_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-gke_4.15.0.1040.54_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-kvm_4.15.0.1042.42_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-oem_4.15.0.58.79_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-oem_4.15.0.1050.54_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-azure_4.15.0.1055.58_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-oracle_4.15.0.1021.15_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-oracle_4.15.0.1021.24_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-generic_4.15.0.58.60_i386.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-generic_4.15.0.58.60_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-virtual_4.15.0.58.60_i386.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-virtual_4.15.0.58.60_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-gke-4.15_4.15.0.1040.43_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-lowlatency_4.15.0.58.60_i386.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-lowlatency_4.15.0.58.60_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-1040-gcp_4.15.0-1040.42_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-1040-gcp_4.15.0-1040.42~16.04.1_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-1040-gke_4.15.0-1040.42_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-1042-kvm_4.15.0-1042.42_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-1050-oem_4.15.0-1050.57_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-1055-azure_4.15.0-1055.60_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-58-generic_4.15.0-58.64_i386.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-58-generic_4.15.0-58.64_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-58-generic_4.15.0-58.64~16.04.1_i386.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-58-generic_4.15.0-58.64~16.04.1_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-generic-hwe-16.04_4.15.0.58.79_i386.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-generic-hwe-16.04_4.15.0.58.79_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-virtual-hwe-16.04_4.15.0.58.79_i386.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-virtual-hwe-16.04_4.15.0.58.79_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-1021-oracle_4.15.0-1021.23_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-1021-oracle_4.15.0-1021.23~16.04.1_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-58-lowlatency_4.15.0-58.64_i386.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-58-lowlatency_4.15.0-58.64_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-58-lowlatency_4.15.0-58.64~16.04.1_i386.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-4.15.0-58-lowlatency_4.15.0-58.64~16.04.1_amd64.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-lowlatency-hwe-16.04_4.15.0.58.79_i386.deb | Linux |
| Linux kernel (USN-4094-1) linux-image-lowlatency-hwe-16.04_4.15.0.58.79_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-aws_4.15.0.1047.46_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-aws-hwe_4.15.0.1047.47_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-4.15.0-1047-aws_4.15.0-1047.49_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-4.15.0-1047-aws_4.15.0-1047.49~16.04.1_amd64.deb | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update bpftool-3.10.0-1127.el7.x86_64.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-3.10.0-1127.el7.x86_64.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-abi-whitelists-3.10.0-1127.el7.noarch.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-debug-3.10.0-1127.el7.x86_64.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-debug-devel-3.10.0-1127.el7.x86_64.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-devel-3.10.0-1127.el7.x86_64.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-doc-3.10.0-1127.el7.noarch.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-headers-3.10.0-1127.el7.x86_64.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-tools-3.10.0-1127.el7.x86_64.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-tools-libs-3.10.0-1127.el7.x86_64.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-tools-libs-devel-3.10.0-1127.el7.x86_64.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update perf-3.10.0-1127.el7.x86_64.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update python-perf-3.10.0-1127.el7.x86_64.rpm | Linux |
| Dtrace-modules-3.8.13-118.40.1.el6uek update (ELSA-2019-4854) dtrace-modules-3.8.13-118.40.1.el6uek-0.4.5-3.el6.x86_64.rpm | Linux |
| Dtrace-modules-3.8.13-118.40.1.el7uek update (ELSA-2019-4854) dtrace-modules-3.8.13-118.40.1.el7uek-0.4.5-3.el7.x86_64.rpm | Linux |
| (CESA-2020:1016) kernel security, bug fix, and enhancement update bpftool-3.10.0-1127.el7.x86_64.rpm | Linux |
| (CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-3.10.0-1127.el7.x86_64.rpm | Linux |
| (CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-debug-3.10.0-1127.el7.x86_64.rpm | Linux |
| (CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-debug-devel-3.10.0-1127.el7.x86_64.rpm | Linux |
| (CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-devel-3.10.0-1127.el7.x86_64.rpm | Linux |
| (CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-headers-3.10.0-1127.el7.x86_64.rpm | Linux |
| (CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-tools-3.10.0-1127.el7.x86_64.rpm | Linux |
| (CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-tools-libs-3.10.0-1127.el7.x86_64.rpm | Linux |
| (CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-tools-libs-devel-3.10.0-1127.el7.x86_64.rpm | Linux |
| (CESA-2020:1016) kernel security, bug fix, and enhancement update perf-3.10.0-1127.el7.x86_64.rpm | Linux |
| (CESA-2020:1016) kernel security, bug fix, and enhancement update python-perf-3.10.0-1127.el7.x86_64.rpm | Linux |
| Uncontrolled Resource Consumption Vulnerability (CVE-2018-20169) | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234