CVE-2019-20636

Medium

Description

In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by input_set_keycode, aka CID-cb222aed03d7.

SeverityMedium
CVSS6.7
Exploit probability—
ProductLinux Kernel
PublishedApr 8, 2020
First seenApr 8, 2020

How to fix

Update
  • linux linux_kernel3.16.83, 4.4.210, 4.9.210, 4.14.165, 4.19.96, 5.4.12 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernelv < 3.16.83, 3.17 ≤ v < 4.4.210, 4.5 ≤ v < 4.9.210, 4.10 ≤ v < 4.14.165, 4.15 ≤ v < 4.19.96, 4.20 ≤ v < 5.4.123.16.83, 4.4.210, 4.9.210, 4.14.165, 4.19.96, 5.4.12
netapp cloud_backupNo range specified—
netapp solidfireNo range specified—
netapp steelstore_cloud_integrated_storageNo range specified—
netapp fas_8300No range specified—
netapp fas_8700No range specified—
netapp fas_a400No range specified—
netapp fas_baseboard_management_controller_a220No range specified—
netapp fas_baseboard_management_controller_a320No range specified—
netapp fas_baseboard_management_controller_a800No range specified—
netapp fas_baseboard_management_controller_c190No range specified—
netapp h300sNo range specified—
netapp h410sNo range specified—
netapp h500sNo range specified—
netapp h610cNo range specified—
netapp h610sNo range specified—
netapp h615cNo range specified—
netapp h700sNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.