CVE-2019-15927

HIGH7.8

An issue was discovered in the Linux kernel before 4

Published Sep 4, 2019

Modified 1 years ago

Details

An issue was discovered in the Linux kernel before 4.20.2. An out-of-bounds access exists in the function build_audio_procunit in the file sound/usb/mixer.c.

References

ADVISORY

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html

ADVISORY

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html

WEB

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.20.2

WEB

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f4351a199cc120ff9d59e06d02e8657d08e6cc46

WEB

https://security.netapp.com/advisory/ntap-20191004-0001/

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2019-15927

CVSS Analysis

CVSS v3.1

7.8

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Ecosystems

Timeline

PublishedSep 4, 2019

ModifiedAug 5, 2024

CVE-2019-15927 | Mondoo Vulnerability Intelligence