Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2018-20169

23
FAUCET Score

CVE-2018-20169 is a medium-severity vulnerability affecting the Linux kernel before version 4.19.9, specifically within the USB subsystem's handling of extra descriptor size checks. This flaw impacts various distributions including Canonical, Debian, and other Linux systems. The vulnerability carries a CVSS score of 6.8, indicating a high potential for impact on confidentiality, integrity, and availability, and can be exploited with physical access to the system without user interaction. Despite its potential severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
< 3.16.63CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 3.17, < 3.18.129CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 3.19, < 4.4.167CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 4.5, < 4.9.145CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 4.10, < 4.14.88CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

6.8MEDIUM

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
0.9
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.59%
Probability of exploitation in next 30 days
EPSS Percentile
44.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0059 is in the 83rd percentile among its peer group of 1,531 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (27)

github_advisorypatch availablevia nvd_reference
View patch
microsoftpatch availablevia msrc
Product: 16839-17084Fixed in: 6.6.22.1-2
microsoftpatch availablevia msrc
Product: 16839-16817Fixed in: 6.6.22.1-2
microsoftpatch availablevia msrc
Product: 20062-17084Fixed in: 6.6.22.1-2
microsoftpatch availablevia msrc
Product: 19793-17086Fixed in: 5.15.148.2-2
microsoftpatch availablevia msrc
Product: 16960-16823Fixed in: 5.15.148.2-2
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.22.1-2 on Azure Linux 3.0Fixed in: 6.6.22.1-2
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.14.1-2 on Azure Linux 3.0Fixed in: 6.6.22.1-2
microsoftpatch availablevia msrc
Product: cbl2 kernel 5.15.148.2-2 on CBL Mariner 2.0Fixed in: 5.15.148.2-2
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 6.6.22.1-2
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 5.15.148.2-2
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 5.15.148.2-2
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 6.6.22.1-2
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.4 Update Services for SAP SolutionsFixed in: kernel-0:3.10.0-693.69.1.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.6 Extended Update SupportFixed in: kernel-0:3.10.0-957.56.1.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.7 Extended Update SupportFixed in: kernel-0:3.10.0-1062.26.1.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: kernel-rt-0:4.18.0-147.rt24.93.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: kernel-0:4.18.0-147.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise MRG 2Fixed in: kernel-rt-1:3.10.0-693.69.1.rt56.667.el6rt
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Virtualization 4.2 for Red Hat Enterprise Linux 7.6 EUSFixed in: kernel-0:3.10.0-957.56.1.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kernel-0:3.10.0-1127.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.4 Advanced Update SupportFixed in: kernel-0:3.10.0-693.69.1.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.4 Telco Extended Update SupportFixed in: kernel-0:3.10.0-693.69.1.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kernel-rt-0:3.10.0-1127.rt56.1093.el7
View patch
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: kernel
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: kernel
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kernel-alt

Vendor Advisories (3)

microsoft2024-Jun/CVE-2018-20169

CVE-2018-20169

Jun 11, 2024
microsoft2018-Dec/CVE-2018-20169Moderate

An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.

Dec 11, 2018
redhatCVE-2018-20169Moderate

kernel: usb: missing size check in the __usb_get_extra_descriptor() leading to DoS

Dec 5, 2018

References

git.kernel.org / cgit/linux/kernel/git/torvalds/linux.git/commit
Mailing ListPatchVendor Advisory
access.redhat.com / errata/RHSA-2019:3309
Third Party AdvisoryVDB Entry
access.redhat.com / errata/RHSA-2019:3517
Third Party AdvisoryVDB Entry
cdn.kernel.org / pub/linux/kernel/v4.x/ChangeLog-4.19.9
Mailing ListPatchVendor Advisory
github.com / torvalds/linux/commit/704620afc70cf47abb9d6a1a57f3825d2bca49cf
PatchThird Party Advisory
lists.debian.org / debian-lts-announce/2019/03/msg00034.html
Mailing ListThird Party Advisory
lists.debian.org / debian-lts-announce/2019/04/msg00004.html
Mailing ListThird Party Advisory
lists.debian.org / debian-lts-announce/2019/05/msg00002.html
Mailing ListThird Party Advisory
usn.ubuntu.com / 3879-1
Third Party Advisory
usn.ubuntu.com / 3879-2
Third Party Advisory
usn.ubuntu.com / 4094-1
Third Party AdvisoryVDB Entry
usn.ubuntu.com / 4118-1
Third Party AdvisoryVDB Entry