CVSS 3.1
6.7 mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2019-20636
In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by input_set_keycode, aka CID-cb222aed03d7.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
- CWE
- CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- linux:linux_kernel
- netapp:cloud_backup
- netapp:fas_8300
- netapp:fas_8700
- netapp:fas_a400
- netapp:fas_baseboard_management_controller_a220
- netapp:fas_baseboard_management_controller_a320
- netapp:fas_baseboard_management_controller_a800
- netapp:fas_baseboard_management_controller_c190
- netapp:h300s
- netapp:h410s
- netapp:h500s
- netapp:h610c
- netapp:h610s
- netapp:h615c
- netapp:h700s
- netapp:solidfire
- netapp:steelstore_cloud_integrated_storage
References
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.12
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cb222aed03d798fc074be55e59d9a112338ee784
- https://github.com/torvalds/linux/commit/cb222aed03d798fc074be55e59d9a112338ee784
- https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html
- https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html