kernel: OOB writes in parse_hid_report_descriptor in drivers/input/tablet/gtco.c
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 8 | |||
| kernel-rt-0:4.18.0-553.rt7.342.el8_10 | cpe:/a:redhat:enterprise_linux:8::nfv | RHSA-2024:2950 | 2024-05-22T00:00:00Z |
| kernel-0:4.18.0-553.el8_10 | cpe:/o:redhat:enterprise_linux:8 | RHSA-2024:3138 | 2024-05-22T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-1884-1 | linux security update |
Debian DLA |
DLA-1885-1 | linux-4.9 security update |
Debian DSA |
DSA-4495-1 | linux security update |
Debian DSA |
DSA-4497-1 | linux security update |
EUVD |
EUVD-2019-5061 | In parse_hid_report_descriptor in drivers/input/tablet/gtco.c in the Linux kernel through 5.2.1, a malicious USB device can send an HID report that triggers an out-of-bounds write during generation of debugging messages. |
Ubuntu USN |
USN-4115-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-4118-1 | Linux kernel (AWS) vulnerabilities |
Ubuntu USN |
USN-4145-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-4147-1 | Linux kernel vulnerabilities |
No CVSS v4.0
No CVSS v3.1
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.817% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.