CVE-2018-20169: Medium severity IBM Data Risk Manager vulnerability
A flaw was discovered in the Linux kernel's USB subsystem in the usbgetextradescriptor() function in the drivers/usb/core/usb.c which mishandles a size check during the reading of an extra descriptor data. By using a specially crafted USB device which sends a forged extra descriptor, an unprivileged user with physical access to the system can potentially cause a privilege escalation or trigger a system crash or lock up and thus to cause a denial of service (DoS).
Other sources
An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to usbgetextradescriptor in drivers/usb/core/usb.c.
Linux Kernel is vulnerable to a denial of service, caused by improper size validation by the usbgetextradescriptor function in drivers/usb/core/usb.c in the USB subsystem. By sending a specially-crafted request, a local attacker could exploit this vulnerability to cause a denial of service condition.
— IBM
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2018-20169?
The severity of CVE-2018-20169 is considered to be critical due to its potential impact on system integrity if exploited.
How do I fix CVE-2018-20169?
To fix CVE-2018-20169, update the Linux kernel to a version that contains the necessary patches, such as the versions provided by Red Hat or Debian.
Which systems are affected by CVE-2018-20169?
CVE-2018-20169 affects various versions of the Linux kernel on systems such as Red Hat, Debian, and Ubuntu.
What kind of attack does CVE-2018-20169 facilitate?
CVE-2018-20169 can be exploited by an attacker with physical access to a system, allowing them to execute arbitrary code via a specially crafted USB device.
Is the vulnerability CVE-2018-20169 patched in current Linux distributions?
Yes, CVE-2018-20169 has been addressed in various Linux distributions through security updates available for supported versions.