Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-20169
6.8
MEDIUMCVSS v3
Published
December 17, 2018
CVSS v2
7.2 HIGH
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.
GitHub