Published: 16/08/2019 Updated: 03/02/2024

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 436

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

check_input_term in sound/usb/mixer.c in the Linux kernel up to and including 5.2.9 mishandles recursion, leading to kernel stack exhaustion.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
canonical ubuntu linux 14.04
canonical ubuntu linux 16.04
canonical ubuntu linux 18.04
canonical ubuntu linux 19.04
debian debian linux 8.0
debian debian linux 9.0
debian debian linux 10.0
opensuse leap 15.0
opensuse leap 15.1
netapp data availability services -
netapp solidfire -
netapp hci management node -
netapp active iq unified manager -
netapp solidfire_baseboard_management_controller_firmware -
netapp h410c_firmware -

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2019-14821 Matt Delco reported a race condition in KVM's coalesced MMIO facility, which could lead to out-of-bounds access in the kernel A local attacker permitted to access /dev/kvm cou ...

Several security issues were fixed in the Linux kernel ...

Impact: Moderate Public Date: 2019-08-20 CWE: CWE-400 Bugzilla: 1743539: CVE-2019-15118 kernel: mishand ...

CWE-674 https://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound.git/commit/?id=19bce474c45be69a284ecee660aa12d8f1e88f18 https://security.netapp.com/advisory/ntap-20190905-0002/http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html https://www.debian.org/security/2019/dsa-4531 https://seclists.org/bugtraq/2019/Sep/41 https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html https://lists.debian.org/debian-lts-announce/2019/10/msg00000.html https://usn.ubuntu.com/4147-1/https://usn.ubuntu.com/4162-1/https://usn.ubuntu.com/4163-1/https://usn.ubuntu.com/4163-2/https://usn.ubuntu.com/4162-2/https://seclists.org/bugtraq/2019/Nov/11 http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html https://lore.kernel.org/lkml/20190815043554.16623-1-benquike%40gmail.com/https://www.debian.org/security/2019/dsa-4531 https://nvd.nist.gov https://usn.ubuntu.com/4163-1/

CVE-2019-15118

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect