Out-of-bounds read in Linux kernel - CVE-2020-13143

Vulnerability identifier: #VU28157

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-13143

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition in "gadget_dev_desc_UDC_store" in "drivers/usb/gadget/configfs.c" file. A remote attacker can trigger out-of-bounds read error and cause a denial of service on the target system.

Linux kernel
Slackware Linux
Ubuntu
linux-image-virtual-lts-xenial (Ubuntu package)
linux-image-powerpc64-smp-lts-xenial (Ubuntu package)
linux-image-powerpc64-emb-lts-xenial (Ubuntu package)
linux-image-powerpc-smp-lts-xenial (Ubuntu package)
linux-image-powerpc-e500mc-lts-xenial (Ubuntu package)
linux-image-lowlatency-lts-xenial (Ubuntu package)
linux-image-generic-lts-xenial (Ubuntu package)
linux-image-generic-lpae-lts-xenial (Ubuntu package)
linux-image-powerpc64-emb (Ubuntu package)
linux-image-powerpc64-smp (Ubuntu package)
linux-image-powerpc-smp (Ubuntu package)
linux-image-powerpc-e500mc (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-4.4.0-185-powerpc64-emb (Ubuntu package)
linux-image-4.4.0-185-lowlatency (Ubuntu package)
linux-image-4.4.0-185-powerpc64-smp (Ubuntu package)
linux-image-4.4.0-185-generic (Ubuntu package)
linux-image-4.4.0-185-powerpc-smp (Ubuntu package)
linux-image-4.4.0-185-powerpc-e500mc (Ubuntu package)
linux-image-4.4.0-185-generic-lpae (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-4.4.0-1074-aws (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-4.4.0-1076-kvm (Ubuntu package)
linux-image-4.4.0-1110-aws (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-4.4.0-1135-raspi2 (Ubuntu package)
linux-image-snapdragon (Ubuntu package)
linux-image-4.4.0-1139-snapdragon (Ubuntu package)
linux-4.4.227/kernel-generic
linux-4.4.227/kernel-huge
linux-4.4.227/kernel-modules
linux-4.4.227/kernel-headers
linux-image-4.15.0-107-generic (Ubuntu package)
linux-image-4.15.0-107-generic-lpae (Ubuntu package)
linux-image-4.15.0-107-lowlatency (Ubuntu package)
linux-image-oem (Ubuntu package)
linux-image-virtual-hwe-16.04 (Ubuntu package)
linux-image-lowlatency-hwe-16.04 (Ubuntu package)
linux-image-generic-lpae-hwe-16.04 (Ubuntu package)
linux-image-generic-hwe-16.04 (Ubuntu package)
linux-image-4.15.0-109-generic-lpae (Ubuntu package)
linux-image-4.15.0-109-lowlatency (Ubuntu package)
linux-image-4.15.0-109-generic (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-4.15.0-1046-oracle (Ubuntu package)
linux-image-4.15.0-1048-oracle (Ubuntu package)
linux-image-oracle-lts-18.04 (Ubuntu package)
linux-image-gke-4.15 (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-4.15.0-1064-gke (Ubuntu package)
linux-image-4.15.0-1065-raspi2 (Ubuntu package)
linux-image-4.15.0-1069-kvm (Ubuntu package)
linux-image-aws-hwe (Ubuntu package)
linux-image-4.15.0-1074-aws (Ubuntu package)
linux-image-aws-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1077-aws (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-4.15.0-1078-gcp (Ubuntu package)
linux-image-gcp-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1081-snapdragon (Ubuntu package)
linux-image-azure-lts-18.04 (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-4.15.0-1091-azure (Ubuntu package)
linux-image-4.15.0-1091-oem (Ubuntu package)
linux-image-gke-5.0 (Ubuntu package)
linux-image-5.0.0-1043-gke (Ubuntu package)
linux-image-oem-osp1 (Ubuntu package)
linux-image-5.0.0-1063-oem-osp1 (Ubuntu package)
linux-image-5.3.0-62-generic (Ubuntu package)
linux-image-5.3.0-62-lowlatency (Ubuntu package)
linux-image-5.3.0-62-snapdragon (Ubuntu package)
linux-image-5.3.0-62-generic-lpae (Ubuntu package)
linux-image-generic-hwe-18.04 (Ubuntu package)
linux-image-generic-lpae-hwe-18.04 (Ubuntu package)
linux-image-gkeop-5.3 (Ubuntu package)
linux-image-lowlatency-hwe-18.04 (Ubuntu package)
linux-image-snapdragon-hwe-18.04 (Ubuntu package)
linux-image-virtual-hwe-18.04 (Ubuntu package)
linux-image-5.3.0-1024-kvm (Ubuntu package)
linux-image-raspi2-hwe-18.04 (Ubuntu package)
linux-image-5.3.0-1028-oracle (Ubuntu package)
linux-image-5.3.0-1028-raspi2 (Ubuntu package)
linux-image-gke-5.3 (Ubuntu package)
linux-image-5.3.0-1030-aws (Ubuntu package)
linux-image-5.3.0-1030-gcp (Ubuntu package)
linux-image-5.3.0-1030-gke (Ubuntu package)
linux-image-5.3.0-1032-azure (Ubuntu package)
linux-image-5.4.0-28-generic (Ubuntu package)
linux-image-5.4.0-40-generic (Ubuntu package)
linux-image-5.4.0-40-generic-lpae (Ubuntu package)
linux-image-5.4.0-40-lowlatency (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-5.4.0-1013-raspi (Ubuntu package)
linux-image-5.4.0-1018-aws (Ubuntu package)
linux-image-5.4.0-1019-oracle (Ubuntu package)
linux-image-5.4.0-1019-gcp (Ubuntu package)
linux-image-5.4.0-1020-azure (Ubuntu package)

Install updates from vendor's website.

Linux kernel - update to 5.6.14
linux-image-virtual-lts-xenial (Ubuntu package) - update to 4.4.0.185.162
linux-image-powerpc64-smp-lts-xenial (Ubuntu package) - update to 4.4.0.185.162
linux-image-powerpc64-emb-lts-xenial (Ubuntu package) - update to 4.4.0.185.162
linux-image-powerpc-smp-lts-xenial (Ubuntu package) - update to 4.4.0.185.162
linux-image-powerpc-e500mc-lts-xenial (Ubuntu package) - update to 4.4.0.185.162
linux-image-lowlatency-lts-xenial (Ubuntu package) - update to 4.4.0.185.162
linux-image-generic-lts-xenial (Ubuntu package) - update to 4.4.0.185.162
linux-image-generic-lpae-lts-xenial (Ubuntu package) - update to 4.4.0.185.162
linux-image-powerpc64-emb (Ubuntu package) - update to 4.4.0.185.191
linux-image-powerpc64-smp (Ubuntu package) - update to 4.4.0.185.191
linux-image-powerpc-smp (Ubuntu package) - update to 4.4.0.185.191
linux-image-powerpc-e500mc (Ubuntu package) - update to 4.4.0.185.191
linux-image-virtual (Ubuntu package) - addressed in versions 4.4.0.185.191, 4.15.0.109.97, 5.4.0.40.43
linux-image-lowlatency (Ubuntu package) - addressed in versions 4.4.0.185.191, 4.15.0.109.97, 5.4.0.40.43
linux-image-generic (Ubuntu package) - addressed in versions 4.4.0.185.191, 4.15.0.109.97, 5.4.0.40.43
linux-image-generic-lpae (Ubuntu package) - addressed in versions 4.4.0.185.191, 4.15.0.109.97, 5.4.0.40.43
linux-image-4.4.0-185-powerpc64-emb (Ubuntu package) - addressed in versions 4.4.0-185.215, 4.4.0-185.215~14.04.1
linux-image-4.4.0-185-lowlatency (Ubuntu package) - addressed in versions 4.4.0-185.215, 4.4.0-185.215~14.04.1
linux-image-4.4.0-185-powerpc64-smp (Ubuntu package) - addressed in versions 4.4.0-185.215, 4.4.0-185.215~14.04.1
linux-image-4.4.0-185-generic (Ubuntu package) - addressed in versions 4.4.0-185.215, 4.4.0-185.215~14.04.1
linux-image-4.4.0-185-powerpc-smp (Ubuntu package) - addressed in versions 4.4.0-185.215, 4.4.0-185.215~14.04.1
linux-image-4.4.0-185-powerpc-e500mc (Ubuntu package) - addressed in versions 4.4.0-185.215, 4.4.0-185.215~14.04.1
linux-image-4.4.0-185-generic-lpae (Ubuntu package) - addressed in versions 4.4.0-185.215, 4.4.0-185.215~14.04.1
linux-image-aws (Ubuntu package) - addressed in versions 4.4.0.1074.71, 4.4.0.1110.114, 5.3.0.1030.28, 5.4.0.1018.19
linux-image-4.4.0-1074-aws (Ubuntu package) - update to 4.4.0-1074.78
linux-image-kvm (Ubuntu package) - addressed in versions 4.4.0.1076.74, 4.15.0.1069.65, 5.4.0.1018.17
linux-image-4.4.0-1076-kvm (Ubuntu package) - update to 4.4.0-1076.83
linux-image-4.4.0-1110-aws (Ubuntu package) - update to 4.4.0-1110.121
linux-image-raspi2 (Ubuntu package) - addressed in versions 4.4.0.1135.135, 4.15.0.1065.63, 5.4.0.1013.13
linux-image-4.4.0-1135-raspi2 (Ubuntu package) - update to 4.4.0-1135.144
linux-image-snapdragon (Ubuntu package) - addressed in versions 4.4.0.1139.131, 4.15.0.1081.84
linux-image-4.4.0-1139-snapdragon (Ubuntu package) - update to 4.4.0-1139.147
linux-4.4.227/kernel-generic - update to 4.4.227
linux-4.4.227/kernel-huge - update to 4.4.227
linux-4.4.227/kernel-modules - update to 4.4.227
linux-4.4.227/kernel-headers - update to 4.4.227_smp
linux-image-4.15.0-107-generic (Ubuntu package) - update to 4.15.0-107.108~16.04.1
linux-image-4.15.0-107-generic-lpae (Ubuntu package) - update to 4.15.0-107.108~16.04.1
linux-image-4.15.0-107-lowlatency (Ubuntu package) - update to 4.15.0-107.108~16.04.1
linux-image-oem (Ubuntu package) - addressed in versions 4.15.0.107.112, 4.15.0.1091.94, 5.4.0.40.43
linux-image-virtual-hwe-16.04 (Ubuntu package) - update to 4.15.0.107.112
linux-image-lowlatency-hwe-16.04 (Ubuntu package) - update to 4.15.0.107.112
linux-image-generic-lpae-hwe-16.04 (Ubuntu package) - update to 4.15.0.107.112
linux-image-generic-hwe-16.04 (Ubuntu package) - update to 4.15.0.107.112
linux-image-4.15.0-109-generic-lpae (Ubuntu package) - update to 4.15.0-109.110
linux-image-4.15.0-109-lowlatency (Ubuntu package) - update to 4.15.0-109.110
linux-image-4.15.0-109-generic (Ubuntu package) - update to 4.15.0-109.110
linux-image-oracle (Ubuntu package) - addressed in versions 4.15.0.1046.39, 5.3.0.1028.25, 5.4.0.1019.17
linux-image-4.15.0-1046-oracle (Ubuntu package) - update to 4.15.0-1046.50~16.04.1
linux-image-4.15.0-1048-oracle (Ubuntu package) - update to 4.15.0-1048.52
linux-image-oracle-lts-18.04 (Ubuntu package) - update to 4.15.0.1048.57
linux-image-gke-4.15 (Ubuntu package) - update to 4.15.0.1064.66
linux-image-gke (Ubuntu package) - addressed in versions 4.15.0.1064.66, 4.15.0.1078.80, 5.4.0.1019.17
linux-image-4.15.0-1064-gke (Ubuntu package) - update to 4.15.0-1064.67
linux-image-4.15.0-1065-raspi2 (Ubuntu package) - update to 4.15.0-1065.69
linux-image-4.15.0-1069-kvm (Ubuntu package) - update to 4.15.0-1069.70
linux-image-aws-hwe (Ubuntu package) - update to 4.15.0.1074.74
linux-image-4.15.0-1074-aws (Ubuntu package) - update to 4.15.0-1074.78~16.04.1
linux-image-aws-lts-18.04 (Ubuntu package) - update to 4.15.0.1077.79
linux-image-4.15.0-1077-aws (Ubuntu package) - update to 4.15.0-1077.81
linux-image-gcp (Ubuntu package) - addressed in versions 4.15.0.1078.80, 5.3.0.1030.24, 5.4.0.1019.17
linux-image-4.15.0-1078-gcp (Ubuntu package) - addressed in versions 4.15.0-1078.88, 4.15.0-1078.88~16.04.1
linux-image-gcp-lts-18.04 (Ubuntu package) - update to 4.15.0.1078.94
linux-image-4.15.0-1081-snapdragon (Ubuntu package) - update to 4.15.0-1081.88
linux-image-azure-lts-18.04 (Ubuntu package) - update to 4.15.0.1091.62
linux-image-azure (Ubuntu package) - addressed in versions 4.15.0.1091.68, 4.15.0.1091.86, 5.3.0.1032.28, 5.4.0.1020.19
linux-image-4.15.0-1091-azure (Ubuntu package) - addressed in versions 4.15.0-1091.101, 4.15.0-1091.101~14.04.1, 4.15.0-1091.101~16.04.1
linux-image-4.15.0-1091-oem (Ubuntu package) - update to 4.15.0-1091.101
linux-image-gke-5.0 (Ubuntu package) - update to 5.0.0.1043.28
linux-image-5.0.0-1043-gke (Ubuntu package) - update to 5.0.0-1043.44
linux-image-oem-osp1 (Ubuntu package) - addressed in versions 5.0.0.1063.61, 5.4.0.40.43
linux-image-5.0.0-1063-oem-osp1 (Ubuntu package) - update to 5.0.0-1063.68
linux-image-5.3.0-62-generic (Ubuntu package) - addressed in versions 5.3.0-62.56, 5.3.0-62.56~18.04.1
linux-image-5.3.0-62-lowlatency (Ubuntu package) - addressed in versions 5.3.0-62.56, 5.3.0-62.56~18.04.1
linux-image-5.3.0-62-snapdragon (Ubuntu package) - update to 5.3.0-62.56
linux-image-5.3.0-62-generic-lpae (Ubuntu package) - update to 5.3.0-62.56~18.04.1
linux-image-generic-hwe-18.04 (Ubuntu package) - update to 5.3.0.62.115
linux-image-generic-lpae-hwe-18.04 (Ubuntu package) - update to 5.3.0.62.115
linux-image-gkeop-5.3 (Ubuntu package) - update to 5.3.0.62.115
linux-image-lowlatency-hwe-18.04 (Ubuntu package) - update to 5.3.0.62.115
linux-image-snapdragon-hwe-18.04 (Ubuntu package) - update to 5.3.0.62.115
linux-image-virtual-hwe-18.04 (Ubuntu package) - update to 5.3.0.62.115
linux-image-5.3.0-1024-kvm (Ubuntu package) - update to 5.3.0-1024.26
linux-image-raspi2-hwe-18.04 (Ubuntu package) - update to 5.3.0.1028.17
linux-image-5.3.0-1028-oracle (Ubuntu package) - addressed in versions 5.3.0-1028.30, 5.3.0-1028.30~18.04.1
linux-image-5.3.0-1028-raspi2 (Ubuntu package) - update to 5.3.0-1028.30~18.04.2
linux-image-gke-5.3 (Ubuntu package) - update to 5.3.0.1030.15
linux-image-5.3.0-1030-aws (Ubuntu package) - addressed in versions 5.3.0-1030.32, 5.3.0-1030.32~18.04.1
linux-image-5.3.0-1030-gcp (Ubuntu package) - addressed in versions 5.3.0-1030.32, 5.3.0-1030.32~18.04.1
linux-image-5.3.0-1030-gke (Ubuntu package) - update to 5.3.0-1030.32~18.04.1
linux-image-5.3.0-1032-azure (Ubuntu package) - addressed in versions 5.3.0-1032.33, 5.3.0-1032.33~18.04.1
linux-image-5.4.0-28-generic (Ubuntu package) - update to 5.4.0-28.32
linux-image-5.4.0-40-generic (Ubuntu package) - update to 5.4.0-40.44~18.04.1
linux-image-5.4.0-40-generic-lpae (Ubuntu package) - update to 5.4.0-40.44~18.04.1
linux-image-5.4.0-40-lowlatency (Ubuntu package) - update to 5.4.0-40.44~18.04.1
linux-image-raspi (Ubuntu package) - update to 5.4.0.1013.13
linux-image-5.4.0-1013-raspi (Ubuntu package) - update to 5.4.0-1013.13~18.04.1
linux-image-5.4.0-1018-aws (Ubuntu package) - update to 5.4.0-1018.18~18.04.1
linux-image-5.4.0-1019-oracle (Ubuntu package) - update to 5.4.0-1019.19~18.04.1
linux-image-5.4.0-1019-gcp (Ubuntu package) - update to 5.4.0-1019.19~18.04.2
linux-image-5.4.0-1020-azure (Ubuntu package) - update to 5.4.0-1020.20~18.04.1

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=15753588bcd4bbffae1cca33c8ced5722477fe1f
• https://www.spinics.net/lists/linux-usb/msg194331.html

• Multiple vulnerabilities in Linux kernel
• Ubuntu update for linux-gke-5.0
• Ubuntu update for linux
• Ubuntu update for linux
• Ubuntu update for linux
• Ubuntu update for linux
• Slackware Linux update for kernel