CVE-2020-13143

gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an…

published May 18, 2020

CVSS
—
EPSS
5%
Percentile
92.4
In the wild
Unconfirmed
What it is

gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal '\0' value, which allows attackers to trigger an out-of-bounds read, aka CID-15753588bcd4.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05193 · 92.4th percentile
Published
2020-05-18T17:50Z
EPSS history
Timeline
  • 18 MAY 17:50Z
    gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an…
    cvelistv5