Your submission was sent successfully! Close

You have successfully unsubscribed! Close

CVE-2018-20961

Published: 7 August 2019

In the Linux kernel before 4.16.4, a double free vulnerability in the f_midi_set_alt function of drivers/usb/gadget/function/f_midi.c in the f_midi driver may allow attackers to cause a denial of service or possibly have unspecified other impact.

From the Ubuntu Security Team

It was discovered that the USB gadget Midi driver in the Linux kernel contained a double-free vulnerability when handling certain error conditions. A local attacker could use this to cause a denial of service (system crash).

Priority

Medium

Cvss 3 Severity Score

9.8

Score breakdown

Status

Package Release Status
linux
Launchpad, Ubuntu, Debian
bionic
Released (4.15.0-24.26)
disco Not vulnerable
(4.18.0-10.11)
trusty Ignored
(was needs-triage ESM criteria)
upstream
Released (4.17~rc1)
xenial
Released (4.4.0-165.193)
Patches:
Introduced by

ad0d1a058eac46503edbc510d1ce44c5df8e0c91

Fixed by 7fafcfdf6377b18b2a726ea554d6e593ba44349f
linux-aws
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(CONFIG_USB_F_MIDI is not enabled)
disco Not vulnerable
(CONFIG_USB_F_MIDI is not enabled)
upstream Not vulnerable
(CONFIG_USB_F_MIDI is not enabled)
xenial Not vulnerable
(CONFIG_USB_F_MIDI is not enabled)
linux-aws-hwe
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Does not exist

upstream Not vulnerable
(CONFIG_USB_F_MIDI is not enabled)
xenial Not vulnerable
(CONFIG_USB_F_MIDI is not enabled)
linux-azure
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(CONFIG_USB_F_MIDI is not enabled)
disco Not vulnerable
(CONFIG_USB_F_MIDI is not enabled)
upstream Not vulnerable
(CONFIG_USB_F_MIDI is not enabled)
xenial Not vulnerable
(CONFIG_USB_F_MIDI is not enabled)
linux-azure-edge
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(CONFIG_USB_F_MIDI is not enabled)
disco Does not exist

upstream Needs triage

xenial Not vulnerable
(CONFIG_USB_F_MIDI is not enabled)
linux-gcp
Launchpad, Ubuntu, Debian
bionic
Released (4.15.0-1010.10)
disco Not vulnerable
(4.18.0-1002.3)
upstream
Released (4.17~rc1)
xenial
Released (4.15.0-1014.14~16.04.1)
linux-gcp-edge
Launchpad, Ubuntu, Debian
bionic
Released (4.15.0-1010.10)
disco Does not exist

upstream
Released (4.17~rc1)
xenial Does not exist

linux-gke-4.15
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.15.0-1030.32)
disco Does not exist

upstream
Released (4.17~rc1)
xenial Does not exist

linux-gke-5.0
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(5.0.0-1011.11~18.04.1)
disco Does not exist

upstream
Released (4.17~rc1)
xenial Does not exist

linux-hwe
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.18.0-13.14~18.04.1)
disco Does not exist

upstream
Released (4.17~rc1)
xenial
Released (4.15.0-24.26~16.04.1)
linux-hwe-edge
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(5.0.0-15.16~18.04.1)
disco Does not exist

upstream
Released (4.17~rc1)
xenial
Released (4.15.0-24.26~16.04.1)
linux-kvm
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(CONFIG_USB_F_MIDI is not enabled)
disco Not vulnerable
(CONFIG_USB_F_MIDI is not enabled)
upstream Not vulnerable
(CONFIG_USB_F_MIDI is not enabled)
xenial Not vulnerable
(CONFIG_USB_F_MIDI is not enabled)
linux-lts-trusty
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Does not exist

upstream
Released (4.17~rc1)
xenial Does not exist

linux-lts-xenial
Launchpad, Ubuntu, Debian
bionic Does not exist

disco Does not exist

upstream
Released (4.17~rc1)
xenial Does not exist

linux-oem
Launchpad, Ubuntu, Debian
bionic
Released (4.15.0-1009.12)
disco Not vulnerable
(4.15.0-1021.24)
upstream
Released (4.17~rc1)
xenial Ignored
(was needs-triage now end-of-life)
linux-oracle
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(4.15.0-1007.9)
disco Not vulnerable
(4.15.0-1007.9)
upstream
Released (4.17~rc1)
xenial Not vulnerable
(4.15.0-1007.9~16.04.1)
linux-raspi2
Launchpad, Ubuntu, Debian
bionic
Released (4.15.0-1013.14)
disco Not vulnerable
(4.18.0-1005.7)
upstream
Released (4.17~rc1)
xenial
Released (4.4.0-1123.132)
linux-snapdragon
Launchpad, Ubuntu, Debian
bionic
Released (4.15.0-1053.57)
disco Not vulnerable
(5.0.0-1010.10)
upstream
Released (4.17~rc1)
xenial
Released (4.4.0-1127.135)

Severity score breakdown

Parameter Value
Base score 9.8
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Scope Unchanged
Confidentiality High
Integrity impact High
Availability impact High
Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H