CVE-2020-13143
Fixed in a distro release EPSS 5%
gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal '\0' value, which allows attackers to trigger an out-of-bounds read, aka CID-15753588bcd4.
Products: linux_kernel, opensuse leap, debian_linux, canonical ubuntu_linux, netapp active_iq_unified_manager, netapp cloud_backup, netapp element_software, netapp hci_management_node, netapp solidfire, netapp steelstore_cloud_integrated_storage, netapp solidfire_baseboard_management_controller_firmware, netapp bootstrap_os, netapp a700s_firmware, netapp h300s_firmware, netapp h500s_firmware, netapp h700s_firmware, netapp h300e_firmware, netapp h500e_firmware, netapp h700e_firmware, netapp h410s_firmware, netapp h410c_firmware, netapp h610c_firmware, netapp h610s_firmware, netapp h615c_firmware
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | linux | 4.19.118-2+deb10u1 |
| Debian 12 | linux | 5.6.14-1 |
| Debian 13 | linux | 5.6.14-1 |
| Debian 14 | linux | 5.6.14-1 |
| Debian 8 | linux | 3.16.84-1 |
| Debian 8 | linux-4.9 | 4.9.210-1+deb9u1~deb8u1 |
| Debian 9 | linux | 4.9.210-1+deb9u1 |
| SUSE Linux Enterprise High Availability Extension 12 SP4 | kernel-default | 4.12.14-95.54.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP5 | kernel-default | 4.12.14-122.23.1 |
| SUSE Linux Enterprise High Availability Extension 15 | kernel-default | 4.12.14-150.52.1 |
| SUSE Linux Enterprise High Availability Extension 15 SP1 | kernel-default | 4.12.14-197.45.1 |
| SUSE Linux Enterprise High Availability Extension 15 SP2 | kernel-default | 5.3.18-24.9.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | kernel-default | 4.12.14-150.52.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | kernel-docs | 4.12.14-150.52.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | kernel-obs-build | 4.12.14-150.52.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | kernel-source | 4.12.14-150.52.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | kernel-syms | 4.12.14-150.52.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | kernel-vanilla | 4.12.14-150.52.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | kernel-default | 4.12.14-150.52.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | kernel-docs | 4.12.14-150.52.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | kernel-obs-build | 4.12.14-150.52.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | kernel-source | 4.12.14-150.52.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | kernel-syms | 4.12.14-150.52.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | kernel-vanilla | 4.12.14-150.52.1 |
| SUSE Linux Enterprise Live Patching 12 SP4 | kernel-default | 4.12.14-95.54.1 |
| SUSE Linux Enterprise Live Patching 12 SP4 | kgraft-patch-SLE12-SP4_Update_14 | 1-6.3.1 |
| SUSE Linux Enterprise Live Patching 12 SP5 | kernel-default | 4.12.14-122.23.1 |
| SUSE Linux Enterprise Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_5 | 1-8.3.1 |
| SUSE Linux Enterprise Live Patching 15 | kernel-default | 4.12.14-150.52.1 |
| SUSE Linux Enterprise Live Patching 15 | kernel-livepatch-SLE15_Update_18 | 1-1.5.1 |
| SUSE Linux Enterprise Live Patching 15 SP1 | kernel-default | 4.12.14-197.45.1 |
| SUSE Linux Enterprise Live Patching 15 SP1 | kernel-livepatch-SLE15-SP1_Update_12 | 1-3.5.1 |
| SUSE Linux Enterprise Live Patching 15 SP2 | kernel-default | 5.3.18-24.9.1 |
| SUSE Linux Enterprise Live Patching 15 SP2 | kernel-livepatch-SLE15-SP2_Update_1 | 1-5.3.6 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | kernel-default | 4.12.14-197.45.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | kernel-source | 4.12.14-197.45.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | kernel-zfcpdump | 4.12.14-197.45.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | kernel-default | 5.3.18-24.9.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | kernel-default-base | 5.3.18-24.9.1.9.2.6 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | kernel-preempt | 5.3.18-24.9.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | kernel-source | 5.3.18-24.9.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-docs | 4.12.14-197.45.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-obs-build | 4.12.14-197.45.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-source | 4.12.14-197.45.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-syms | 4.12.14-197.45.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP2 | kernel-docs | 5.3.18-24.9.2 |
| SUSE Linux Enterprise Module for Development Tools 15 SP2 | kernel-obs-build | 5.3.18-24.9.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP2 | kernel-preempt | 5.3.18-24.9.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP2 | kernel-source | 5.3.18-24.9.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP2 | kernel-syms | 5.3.18-24.9.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP1 | kernel-default | 4.12.14-197.45.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP2 | kernel-default | 5.3.18-24.9.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP1 | kernel-azure | 4.12.14-8.33.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP1 | kernel-source-azure | 4.12.14-8.33.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP1 | kernel-syms-azure | 4.12.14-8.33.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP2 | kernel-azure | 5.3.18-18.5.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP2 | kernel-source-azure | 5.3.18-18.5.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP2 | kernel-syms-azure | 5.3.18-18.5.1 |
| SUSE Linux Enterprise Real Time 12 SP4 | kernel-rt | 4.12.14-8.23.1 |
| SUSE Linux Enterprise Real Time 12 SP4 | kernel-rt_debug | 4.12.14-8.23.1 |
| SUSE Linux Enterprise Real Time 12 SP4 | kernel-source-rt | 4.12.14-8.23.1 |
| SUSE Linux Enterprise Real Time 12 SP4 | kernel-syms-rt | 4.12.14-8.23.1 |
| SUSE Linux Enterprise Real Time 12 SP5 | kernel-rt | 4.12.14-10.13.1 |
| SUSE Linux Enterprise Real Time 12 SP5 | kernel-rt_debug | 4.12.14-10.13.1 |
| SUSE Linux Enterprise Real Time 12 SP5 | kernel-source-rt | 4.12.14-10.13.1 |
| SUSE Linux Enterprise Real Time 12 SP5 | kernel-syms-rt | 4.12.14-10.13.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-azure | 4.12.14-6.43.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-default | 4.12.14-95.54.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-source | 4.12.14-95.54.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-source-azure | 4.12.14-6.43.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-syms | 4.12.14-95.54.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-syms-azure | 4.12.14-6.43.1 |
| SUSE Linux Enterprise Server 12 SP5 | kernel-azure | 4.12.14-16.16.1 |
| SUSE Linux Enterprise Server 12 SP5 | kernel-default | 4.12.14-122.23.1 |
| SUSE Linux Enterprise Server 12 SP5 | kernel-source | 4.12.14-122.23.1 |
| SUSE Linux Enterprise Server 12 SP5 | kernel-source-azure | 4.12.14-16.16.1 |
| SUSE Linux Enterprise Server 12 SP5 | kernel-syms | 4.12.14-122.23.1 |
| SUSE Linux Enterprise Server 12 SP5 | kernel-syms-azure | 4.12.14-16.16.1 |
| SUSE Linux Enterprise Server 15-LTSS | kernel-default | 4.12.14-150.52.1 |
| SUSE Linux Enterprise Server 15-LTSS | kernel-docs | 4.12.14-150.52.1 |
| SUSE Linux Enterprise Server 15-LTSS | kernel-obs-build | 4.12.14-150.52.1 |
| SUSE Linux Enterprise Server 15-LTSS | kernel-source | 4.12.14-150.52.1 |
| SUSE Linux Enterprise Server 15-LTSS | kernel-syms | 4.12.14-150.52.1 |
| SUSE Linux Enterprise Server 15-LTSS | kernel-vanilla | 4.12.14-150.52.1 |
| SUSE Linux Enterprise Server 15-LTSS | kernel-zfcpdump | 4.12.14-150.52.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-azure | 4.12.14-6.43.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-default | 4.12.14-95.54.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-source | 4.12.14-95.54.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-source-azure | 4.12.14-6.43.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-syms | 4.12.14-95.54.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-syms-azure | 4.12.14-6.43.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-azure | 4.12.14-16.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-default | 4.12.14-122.23.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-source | 4.12.14-122.23.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-source-azure | 4.12.14-16.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-syms | 4.12.14-122.23.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-syms-azure | 4.12.14-16.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | kernel-default | 4.12.14-150.52.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | kernel-docs | 4.12.14-150.52.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | kernel-obs-build | 4.12.14-150.52.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | kernel-source | 4.12.14-150.52.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | kernel-syms | 4.12.14-150.52.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | kernel-vanilla | 4.12.14-150.52.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | kernel-docs | 4.12.14-95.54.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | kernel-obs-build | 4.12.14-95.54.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | kernel-docs | 4.12.14-122.23.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | kernel-obs-build | 4.12.14-122.23.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP4 | kernel-default | 4.12.14-95.54.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP5 | kernel-default | 4.12.14-122.23.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP1 | kernel-default | 4.12.14-197.45.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP2 | kernel-default | 5.3.18-24.9.1 |
| SUSE Real Time Module 15 SP1 | kernel-rt | 4.12.14-14.28.1 |
| SUSE Real Time Module 15 SP1 | kernel-rt_debug | 4.12.14-14.28.1 |
| SUSE Real Time Module 15 SP1 | kernel-source-rt | 4.12.14-14.28.1 |
| SUSE Real Time Module 15 SP1 | kernel-syms-rt | 4.12.14-14.28.1 |
| Ubuntu 16.04 LTS | linux | 4.4.0-185.215 |
| Ubuntu 16.04 LTS | linux-aws | 4.4.0-1110.121 |
| Ubuntu 16.04 LTS | linux-aws-hwe | 4.15.0-1074.78~16.04.1 |
| Ubuntu 16.04 LTS | linux-azure | 4.15.0-1091.101~16.04.1 |
| Ubuntu 16.04 LTS | linux-gcp | 4.15.0-1078.88~16.04.1 |
| Ubuntu 16.04 LTS | linux-hwe | 4.15.0-107.108~16.04.1 |
| Ubuntu 16.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 16.04 LTS | linux-kvm | 4.4.0-1076.83 |
| Ubuntu 16.04 LTS | linux-oracle | 4.15.0-1046.50~16.04.1 |
| Ubuntu 16.04 LTS | linux-raspi2 | 4.4.0-1135.144 |
| Ubuntu 16.04 LTS | linux-snapdragon | 4.4.0-1139.147 |
| Ubuntu 18.04 LTS | linux | 4.15.0-109.110 |
| Ubuntu 18.04 LTS | linux-aws | 4.15.0-1077.81 |
| Ubuntu 18.04 LTS | linux-aws-5.0 | no fix |
| Ubuntu 18.04 LTS | linux-aws-5.3 | 5.3.0-1030.32~18.04.1 |
| Ubuntu 18.04 LTS | linux-azure | no fix |
| Ubuntu 18.04 LTS | linux-azure-4.15 | 4.15.0-1091.101 |
| Ubuntu 18.04 LTS | linux-azure-5.3 | 5.3.0-1032.33~18.04.1 |
| Ubuntu 18.04 LTS | linux-azure-edge | no fix |
| Ubuntu 18.04 LTS | linux-gcp | no fix |
| Ubuntu 18.04 LTS | linux-gcp-4.15 | 4.15.0-1078.88 |
| Ubuntu 18.04 LTS | linux-gcp-5.3 | 5.3.0-1030.32~18.04.1 |
| Ubuntu 18.04 LTS | linux-gcp-edge | no fix |
| Ubuntu 18.04 LTS | linux-gke-4.15 | 4.15.0-1064.67 |
| Ubuntu 18.04 LTS | linux-gke-5.0 | 5.0.0-1043.44 |
| Ubuntu 18.04 LTS | linux-gke-5.3 | 5.3.0-1030.32~18.04.1 |
| Ubuntu 18.04 LTS | linux-hwe | 5.3.0-62.56~18.04.1 |
| Ubuntu 18.04 LTS | linux-hwe-5.4 | 5.4.0-40.44~18.04.1 |
| Ubuntu 18.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 18.04 LTS | linux-kvm | 4.15.0-1069.70 |
| Ubuntu 18.04 LTS | linux-oem | 4.15.0-1091.101 |
| Ubuntu 18.04 LTS | linux-oem-osp1 | 5.0.0-1063.68 |
| Ubuntu 18.04 LTS | linux-oracle | 4.15.0-1048.52 |
| Ubuntu 18.04 LTS | linux-oracle-5.0 | no fix |
| Ubuntu 18.04 LTS | linux-oracle-5.3 | 5.3.0-1028.30~18.04.1 |
| Ubuntu 18.04 LTS | linux-raspi2 | 4.15.0-1065.69 |
| Ubuntu 18.04 LTS | linux-raspi2-5.3 | 5.3.0-1028.30~18.04.2 |
| Ubuntu 18.04 LTS | linux-snapdragon | 4.15.0-1081.88 |
| Ubuntu 20.04 LTS | linux | 5.4.0-40.44 |
| Ubuntu 20.04 LTS | linux-aws | 5.4.0-1018.18 |
| Ubuntu 20.04 LTS | linux-azure | 5.4.0-1020.20 |
| Ubuntu 20.04 LTS | linux-azure-fde | no fix |
| Ubuntu 20.04 LTS | linux-gcp | 5.4.0-1019.19 |
| Ubuntu 20.04 LTS | linux-gke | no fix |
| Ubuntu 20.04 LTS | linux-kvm | 5.4.0-1018.18 |
| Ubuntu 20.04 LTS | linux-oem-5.6 | 5.6.0-1011.11 |
| Ubuntu 20.04 LTS | linux-oracle | 5.4.0-1019.19 |
| Ubuntu 20.04 LTS | linux-raspi | 5.4.0-1013.13 |
| Ubuntu 20.04 LTS | linux-raspi2 | no fix |
| Ubuntu 20.04 LTS | linux-riscv | 5.4.0-28.32 |
| Ubuntu 22.04 LTS | linux-intel-iot-realtime | no fix |
| Ubuntu 22.04 LTS | linux-realtime | no fix |
| Ubuntu 22.04 LTS | linux-riscv | no fix |
| Ubuntu 24.04 LTS | linux-raspi-realtime | no fix |
| Ubuntu Pro 14.04 LTS | linux | no fix |
| Ubuntu Pro 14.04 LTS | linux-aws | 4.4.0-1074.78 |
| Ubuntu Pro 14.04 LTS | linux-azure | 4.15.0-1091.101~14.04.1 |
| Ubuntu Pro 14.04 LTS | linux-lts-xenial | 4.4.0-185.215~14.04.1 |
| Ubuntu Pro FIPS-updates 16.04 LTS | linux-fips | 4.4.0-1042.47 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-aws-fips | 4.15.0-2022.22 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-azure-fips | 4.15.0-2006.7 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips | 4.15.0-1035.40 |
| Ubuntu Pro FIPS 16.04 LTS | linux-fips | no fix |
| Ubuntu Pro FIPS 18.04 LTS | linux-aws-fips | no fix |
| Ubuntu Pro FIPS 18.04 LTS | linux-azure-fips | no fix |
| Ubuntu Pro FIPS 18.04 LTS | linux-gcp-fips | no fix |
| openSUSE Leap 15.1 | kernel-debug | 4.12.14-lp151.28.52.1 |
| openSUSE Leap 15.1 | kernel-default | 4.12.14-lp151.28.52.1 |
| openSUSE Leap 15.1 | kernel-docs | 4.12.14-lp151.28.52.2 |
| openSUSE Leap 15.1 | kernel-kvmsmall | 4.12.14-lp151.28.52.1 |
| openSUSE Leap 15.1 | kernel-obs-build | 4.12.14-lp151.28.52.3 |
| openSUSE Leap 15.1 | kernel-obs-qa | 4.12.14-lp151.28.52.3 |
| openSUSE Leap 15.1 | kernel-source | 4.12.14-lp151.28.52.1 |
| openSUSE Leap 15.1 | kernel-syms | 4.12.14-lp151.28.52.1 |
| openSUSE Leap 15.1 | kernel-vanilla | 4.12.14-lp151.28.52.1 |
| openSUSE Leap 15.2 | kernel-debug | 5.3.18-lp152.26.2 |
| openSUSE Leap 15.2 | kernel-default | 5.3.18-lp152.26.2 |
| openSUSE Leap 15.2 | kernel-default-base | 5.3.18-lp152.26.2.lp152.8.2.2 |
| openSUSE Leap 15.2 | kernel-docs | 5.3.18-lp152.26.2 |
| openSUSE Leap 15.2 | kernel-kvmsmall | 5.3.18-lp152.26.2 |
| openSUSE Leap 15.2 | kernel-obs-build | 5.3.18-lp152.26.2 |
| openSUSE Leap 15.2 | kernel-obs-qa | 5.3.18-lp152.26.2 |
| openSUSE Leap 15.2 | kernel-preempt | 5.3.18-lp152.26.2 |
| openSUSE Leap 15.2 | kernel-rt | 5.3.18-lp152.3.5.1 |
| openSUSE Leap 15.2 | kernel-rt_debug | 5.3.18-lp152.3.5.1 |
| openSUSE Leap 15.2 | kernel-source | 5.3.18-lp152.26.2 |
| openSUSE Leap 15.2 | kernel-source-rt | 5.3.18-lp152.3.5.1 |
| openSUSE Leap 15.2 | kernel-syms | 5.3.18-lp152.26.2 |
| openSUSE Leap 15.2 | kernel-syms-rt | 5.3.18-lp152.3.5.1 |