Security readout for executives and security teams
CVE-2020-15393 is a memory leak in the Linux kernel USB test driver. The CVE record names Linux kernel 4.4 through 5.7.6. Business urgency depends on whether vulnerable kernels and this driver are present; available sources do not show active exploitation or a CVSS score. Potential exposure is Linux systems running kernel versions 4.4 through 5.7.6, especially where distro kernels had not yet received vendor security updates. Confirm whether the usbtest driver is built, loadable, or used in your environment. Treat as a routine kernel maintenance item unless vulnerable kernels are widely deployed or USB testing functionality is operationally exposed. Patch through normal Linux update channels and track completion in kernel inventory. Mitigation focus: Apply relevant Linux kernel security updates from your distribution vendor.; Use vendor advisories to identify fixed kernel package versions.; Upgrade away from affected upstream kernel versions where vendor guidance requires it..
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2020-15393 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=28ebeb8db77035e058a510ce9bd17c2b9a009dbaCVE reference · x_refsource_MISC
- https://lkml.org/lkml/2020/6/2/968CVE reference · x_refsource_MISC
- [debian-lts-announce] 20200812 [SECURITY] [DLA 2323-1] linux-4.19 new packageCVE reference · mailing-list, x_refsource_MLIST
- USN-4463-1CVE reference · vendor-advisory, x_refsource_UBUNTU
- USN-4465-1CVE reference · vendor-advisory, x_refsource_UBUNTU
- USN-4483-1CVE reference · vendor-advisory, x_refsource_UBUNTU
- USN-4485-1CVE reference · vendor-advisory, x_refsource_UBUNTU
- [debian-lts-announce] 20201030 [SECURITY] [DLA 2420-1] linux security updateCVE reference · mailing-list, x_refsource_MLIST
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2420-2] linux regression updateCVE reference · mailing-list, x_refsource_MLIST
- https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=831eebad70a25f55b5745453ac252d4afe997187CVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.