CVE-2020-15137

CVE-2020-15137 affects HoRNDIS — an integer overflow in HoRNDIS::receivePacket of the RNDIS packet parser. The vulnerability allows a malicious USB device to disclose kernel memory to userspace on the host (more likely on 32-bit kernels) or cause a kernel crash (more likely on 64-bit kernels) via...