Denial Of Service (DoS)

2021-05-2015:28:28

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

43.3%

JSON

usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925. A use-after-free flaw was found in usb_sg_cancel in drivers/usb/core/message.c in the USB core subsystem. This flaw allows a local attacker with a special user or root privileges to crash the system due to a race problem in the scatter-gather cancellation and transfer completion in usb_sg_wait.

CPENameOperatorVersion
kerneleq4.18.0__193.23.1.el8_2
kerneleq4.18.0__294.el8
kerneleq4.18.0__236.el8
kerneleq4.18.0__147.6.el8
kerneleq4.18.0__80.11.1.el8_0
kerneleq4.18.0__193.el8
kerneleq4.18.0__177.el8
kerneleq4.18.0__193.6.3.el8_2
kerneleq4.18.0__80.4.2.el8_0
kerneleq4.18.0__193.19.1.el8_2

Name	Operator	Version
kernel	eq	4.18.0__193.23.1.el8_2
kernel	eq	4.18.0__294.el8
kernel	eq	4.18.0__236.el8
kernel	eq	4.18.0__147.6.el8
kernel	eq	4.18.0__80.11.1.el8_0
kernel	eq	4.18.0__193.el8
kernel	eq	4.18.0__177.el8
kernel	eq	4.18.0__193.6.3.el8_2
kernel	eq	4.18.0__80.4.2.el8_0
kernel	eq	4.18.0__193.19.1.el8_2