CVE-2020-13143

high-risk
Published 2020-05-18

gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal '\0' value, which allows attackers to trigger an out-of-bounds read, aka CID-15753588bcd4.

Do I need to act?

~
3.3% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
6
CVSS 6.5/10 Medium
NETWORK / LOW complexity

Affected Products (20)

Affected Vendors

Debian Linux Canonical Netapp Opensuse

References (32)

Mailing List http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html
Mailing List https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=d126cf46f...
Patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=15...
Mailing List https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html
Mailing List https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html
Mailing List https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html
Third Party Advisory https://security.netapp.com/advisory/ntap-20200608-0001/
Third Party Advisory https://usn.ubuntu.com/4411-1/
Third Party Advisory https://usn.ubuntu.com/4412-1/
Third Party Advisory https://usn.ubuntu.com/4413-1/
Third Party Advisory https://usn.ubuntu.com/4414-1/
Third Party Advisory https://usn.ubuntu.com/4419-1/
Third Party Advisory https://www.debian.org/security/2020/dsa-4698
Third Party Advisory https://www.debian.org/security/2020/dsa-4699
Third Party Advisory https://www.spinics.net/lists/linux-usb/msg194331.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html
Mailing List https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=d126cf46f...
Patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=15...
and 12 more references
54
/ 100
high-risk
Severity 24/34 · High
Exploitability 7/34 · Low
Exposure 23/34 · High