Find real vulnerabilities before they ship
An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.
Base Score
6.8
| Base Score | 6.8 |
|---|---|
| Vector String | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| Base Severity | Medium |
| Version | 3.1 |
| Attack Vector (AV) | PHYSICAL |
