CVE-2019-14763

Опубликовано: 07 авг. 2019

Источник: nvd

CVSS3: 5.5

CVSS2: 4.9

EPSS Низкий

Описание

In the Linux kernel before 4.16.4, a double-locking error in drivers/usb/dwc3/gadget.c may potentially cause a deadlock with f_hid.

Ссылки

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.4
Mailing List
Vendor Advisory
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=072684e8c58d17e853f8e8b9f6d9ce2e58d2b036
Mailing List
Patch
Vendor Advisory
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c91815b596245fd7da349ecc43c8def670d2269e
Mailing List
Patch
Vendor Advisory
https://github.com/torvalds/linux/commit/072684e8c58d17e853f8e8b9f6d9ce2e58d2b036
Patch
Third Party Advisory
https://github.com/torvalds/linux/commit/c91815b596245fd7da349ecc43c8def670d2269e
Patch
Third Party Advisory
https://usn.ubuntu.com/4115-1/
Third Party Advisory
https://usn.ubuntu.com/4118-1/
Third Party Advisory
https://www.spinics.net/lists/linux-usb/msg167355.html
Mailing List
Patch
Third Party Advisory
https://www.spinics.net/lists/linux-usb/msg167393.html
Mailing List
Patch
Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.4
Mailing List
Vendor Advisory
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=072684e8c58d17e853f8e8b9f6d9ce2e58d2b036
Mailing List
Patch
Vendor Advisory
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c91815b596245fd7da349ecc43c8def670d2269e
Mailing List
Patch
Vendor Advisory
https://github.com/torvalds/linux/commit/072684e8c58d17e853f8e8b9f6d9ce2e58d2b036
Patch
Third Party Advisory
https://github.com/torvalds/linux/commit/c91815b596245fd7da349ecc43c8def670d2269e
Patch
Third Party Advisory
https://usn.ubuntu.com/4115-1/
Third Party Advisory
https://usn.ubuntu.com/4118-1/
Third Party Advisory
https://www.spinics.net/lists/linux-usb/msg167355.html
Mailing List
Patch
Third Party Advisory
https://www.spinics.net/lists/linux-usb/msg167393.html
Mailing List
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 4.16.4 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

EPSS

Процентиль: 20%

0.00064

Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-667

Связанные уязвимости

CVE-2019-14763

CVSS3: 5.5

ubuntu

больше 6 лет назад

In the Linux kernel before 4.16.4, a double-locking error in drivers/usb/dwc3/gadget.c may potentially cause a deadlock with f_hid.

CVE-2019-14763

CVSS3: 6.2

redhat

больше 6 лет назад

In the Linux kernel before 4.16.4, a double-locking error in drivers/usb/dwc3/gadget.c may potentially cause a deadlock with f_hid.

CVE-2019-14763

CVSS3: 5.5

debian

больше 6 лет назад

In the Linux kernel before 4.16.4, a double-locking error in drivers/u ...

GHSA-rq2w-c7m2-92hw

CVSS3: 5.5

github

больше 3 лет назад

In the Linux kernel before 4.16.4, a double-locking error in drivers/usb/dwc3/gadget.c may potentially cause a deadlock with f_hid.

EPSS

Процентиль: 20%

0.00064

Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-667