Description
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/driver.c driver.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | linux-azure | 5.0.0-1022.23~18.04.1 | — |
| Ubuntu 18.04 LTS | linux-gke-5.0 | 5.0.0-1020.20~18.04.1 | USN-4147-1 |
| Ubuntu 18.04 LTS | linux-hwe | 5.0.0-31.33~18.04.1 | USN-4147-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 14.04 LTS | linux +3 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | kernel-rt +12 | 4.18.0-193.rt13.51.el8 | RHSA-2020:1567 |
| RHEL 8 | perf +26 | 4.18.0-193.el8 | RHSA-2020:1769 |
Advisories 4
- USN-4147-1 linux, linux-aws, linux-azure, linux-gcp, linux-gke-5.0, linux-hwe, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities Ubuntu Security Notices (USN) · Sep 7, 2026
- RHSA-2020:1769 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 22, 2026
- RHSA-2020:1567 Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- WID-SEC-2024-3638 Linux Kernel: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Dec 9, 2024
References
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.8
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0b074ab7fc0d575247b9cc9f93bb7e007ca38840
- https://syzkaller.appspot.com/bug?id=0c1e517c657d3de2361cb0cc2d3a8663c25039a7
- [oss-security] 20190820 Linux kernel: multiple vulnerabilities in the USB subsystem x2 mailing-list
- https://security.netapp.com/advisory/ntap-20190905-0002/
- USN-4147-1 vendor-advisory