Published: 03/12/2018 Updated: 10/09/2019

CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 410

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

In the Linux kernel up to and including 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/card.c.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
canonical ubuntu linux 18.10
canonical ubuntu linux 18.04
canonical ubuntu linux 12.04
canonical ubuntu linux 16.04
canonical ubuntu linux 14.04
debian debian linux 8.0

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) b ...

A flaw was found In the Linux kernel, through version 4196, where a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/cardc An attacker could corrupt memory and possibly escalate privileges if the attacker is able to h ...

Several security issues were fixed in the Linux kernel ...

CWE-416 https://github.com/torvalds/linux/commit/5f8cf712582617d523120df67d392059eaf2fc4b https://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound.git/commit/?id=5f8cf712582617d523120df67d392059eaf2fc4b https://bugzilla.suse.com/show_bug.cgi?id=1118152 http://www.securityfocus.com/bid/106109 https://usn.ubuntu.com/3879-2/https://usn.ubuntu.com/3879-1/https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html https://support.f5.com/csp/article/K98155950 https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html https://usn.ubuntu.com/3933-2/https://usn.ubuntu.com/3931-2/https://usn.ubuntu.com/3931-1/https://usn.ubuntu.com/3930-2/https://usn.ubuntu.com/3930-1/https://usn.ubuntu.com/3933-1/https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html https://access.redhat.com/errata/RHSA-2019:2703 https://access.redhat.com/errata/RHSA-2019:2703 https://nvd.nist.gov https://usn.ubuntu.com/3879-2/https://access.redhat.com/security/cve/cve-2018-19824

CVE-2018-19824

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect