parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access.
4.4.0-166.1954.4.0-1096.1074.15.0-1052.54~16.04.14.15.0-1061.664.15.0-1047.504.15.0-66.75~16.04.14.4.0-1060.674.15.0-1027.30~16.04.14.4.0-1124.1334.4.0-1128.136Exploitability
AV:PAC:LAT:NPR:NUI:NVulnerable System
VC:LVI:NVA:HSubsequent System
SC:NSI:NSA:NCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N