CVE-2018-20169

—

CVSS 3.1

6.8 medium

EPSS

<1%p46

Published

Dec 17, 2018 (Dec 17, 2018)

Modified

Jun 17, 2026

Description

An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.

Vendors: linux canonical debian
Products: linux kernel, ubuntu linux, debian linux
Weakness: CWE-400
Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.