01 Record

CVE-2020-15393

In the Linux kernel 4.4 through 5.7.6, usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory leak, aka CID-28ebeb8db770.

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

In the Linux kernel 4.4 through 5.7.6, usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory leak, aka CID-28ebeb8db770.

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.43% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 35.9% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2020-06-29 21:58Z6 YR AGO

Last updated

2024-08-04 13:15Z2 YR AGO

Reserved

2020-06-29

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-401Missing Release of Memory after Effective LifetimeVariant
CWE-772Missing Release of Resource after Effective LifetimeBase

Data version

5.1

Document digest

97daa9f95df0535a8dd3c80e1d66cc01d2e6453af7ba50446d5637dd0fb8201b

05 Affected products

VendorProductVersionsPlatforms

canonicalubuntu_linuxNot specified—

debiandebian_linuxNot specified—

linuxlinux_kernelNot specified—

opensuseleapNot specified—

redhatenterprise_linuxNot specified—

redhatenterprise_mrgNot specified—

06 References

git.kernel.orghttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=28ebeb8db77035e058a510ce9bd17c2b9a009dbax_refsource_MISC
lkml.orghttps://lkml.org/lkml/2020/6/2/968x_refsource_MISC
lists.opensuse.orgopenSUSE-SU-2020:1062http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00071.htmlvendor-advisoryx_refsource_SUSE
lists.opensuse.orgopenSUSE-SU-2020:1153http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.htmlvendor-advisoryx_refsource_SUSE
lists.debian.org[debian-lts-announce] 20200812 [SECURITY] [DLA 2323-1] linux-4.19 new packagehttps://lists.debian.org/debian-lts-announce/2020/08/msg00019.htmlmailing-listx_refsource_MLIST
usn.ubuntu.comUSN-4463-1https://usn.ubuntu.com/4463-1/vendor-advisoryx_refsource_UBUNTU
usn.ubuntu.comUSN-4465-1https://usn.ubuntu.com/4465-1/vendor-advisoryx_refsource_UBUNTU
usn.ubuntu.comUSN-4483-1https://usn.ubuntu.com/4483-1/vendor-advisoryx_refsource_UBUNTU
usn.ubuntu.comUSN-4485-1https://usn.ubuntu.com/4485-1/vendor-advisoryx_refsource_UBUNTU
lists.debian.org[debian-lts-announce] 20201030 [SECURITY] [DLA 2420-1] linux security updatehttps://lists.debian.org/debian-lts-announce/2020/10/msg00032.htmlmailing-listx_refsource_MLIST
lists.debian.org[debian-lts-announce] 20201031 [SECURITY] [DLA 2420-2] linux regression updatehttps://lists.debian.org/debian-lts-announce/2020/10/msg00034.htmlmailing-listx_refsource_MLIST
git.kernel.orghttps://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=831eebad70a25f55b5745453ac252d4afe997187x_refsource_MISC

01 Record index

CVE-2020-15393

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2020-15393

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References