CVE-2019-15926 — Out-of-bounds Read in Kernel

CWE-125 — Out-of-bounds Read11 documents7 sources
Severity
9.1CRITICALNVD
OSV7.8OSV7.4
EPSS
6.0%
top 9.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Linux KernelDebian LinuxCanonical Ubuntu Linux+1 more
Timeline
PublishedSep 4
Latest updateMay 24

Description

An issue was discovered in the Linux kernel before 5.2.3. Out of bounds access exists in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx in the file drivers/net/wireless/ath/ath6kl/wmi.c.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:HExploitability: 3.9 | Impact: 5.2

Affected Packages4 packages

▶NVDlinux/linux_kernel3.2 — 3.16.74+6
▶Debianlinux/linux_kernel< 5.2.6-1+3
▶Ubuntulinux/linux_kernel< 4.4.0-165.193
▶debiandebian/linux< linux 5.2.6-1 (bookworm)

Also affects: Debian Linux 8.0, Ubuntu Linux 16.04, 18.04, 19.10

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

4
GHSA
GHSA-hf6j-w657-xr74: An issue was discovered in the Linux kernel before 5↗2022-05-24
▶
OSV
linux, linux-aws, linux-azure, linux-gcp, linux-gke-5.0, linux-hwe, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities↗2019-10-04
▶
OSV
linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities↗2019-10-01
▶
OSV
CVE-2019-15926: An issue was discovered in the Linux kernel before 5↗2019-09-04
▶

📋Vendor Advisories

4
Ubuntu
Linux kernel vulnerabilities↗2019-10-04
▶
Ubuntu
Linux kernel vulnerabilities↗2019-10-01
▶
Red Hat
kernel: out of bounds access in functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx↗2019-09-04
▶
Debian
CVE-2019-15926: linux - An issue was discovered in the Linux kernel before 5.2.3. Out of bounds access e...↗2019
▶

💬Community

2
Bugzilla
CVE-2019-15926 kernel: out of bounds access in functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx↗2019-09-10
▶
Bugzilla
CVE-2019-15926 kernel: out of bounds access in functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx [fedora-all]↗2019-09-10
▶