UBUNTU-CVE-2019-15117

Details

parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access.

Affected Packages(42 packages)

linux

Ubuntu 16.04 LTS

Fixed in:

4.4.0-166.195

linux-aws

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1096.107

linux-aws-hwe

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1052.54~16.04.1

linux-azure

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1061.66

linux-gcp

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1047.50

linux-hwe

Ubuntu 16.04 LTS

Fixed in:

4.15.0-66.75~16.04.1

linux-kvm

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1060.67

linux-oracle

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1027.30~16.04.1

linux-raspi2

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1124.133

linux-snapdragon

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1128.136

References

REPORT

https://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound.git/commit/?id=daac07156b330b18eb5071aec4b3ddca1c377f2c

REPORT

https://lore.kernel.org/lkml/20190814023625.21683-1-benquike@gmail.com/

REPORT

https://ubuntu.com/security/CVE-2019-15117

ADVISORY

https://ubuntu.com/security/notices/USN-4147-1

ADVISORY

https://ubuntu.com/security/notices/USN-4162-1

ADVISORY

https://ubuntu.com/security/notices/USN-4162-2

ADVISORY

https://ubuntu.com/security/notices/USN-4163-1

ADVISORY

https://ubuntu.com/security/notices/USN-4163-2

REPORT

https://www.cve.org/CVERecord?id=CVE-2019-15117