CVE-2018-20169

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.19.9

Description An issue in the Linux kernel's USB subsystem mishandles size checks during the reading of an extra descriptor, related to the usb get extra descriptor function in drivers/usb/core/usb.c. This issue may allow an attacker to impact the confidentiality and integrity of protected information.

Recommendations For Linux kernel versions prior to 4.19.9, update to version 4.19.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the USB subsystem to minimize the risk of exploitation.