CVE-2019-15117 PUBLISHED

parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access.

EPSS 0.10% · 26.5th percentile

Risk Scores

EPSS Score
0.10%
26.5th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSlinux-hwe-edge0, 5.0.0-16.17~18.04.1, 5.0.0-15.16~18.04.1
Ubuntu:16.04:LTSlinux-kvm4.4.0-1023.28, 4.4.0-1004.9, 4.4.0-1019.24
Ubuntu:Pro:FIPS-updates:18.04:LTSlinux-azure-fips4.15.0-1002.2, 0
Ubuntu:18.04:LTSlinux-oem4.15.0-1034.39, 4.15.0-1033.38, 4.15.0-1030.35
Ubuntu:Pro:FIPS-updates:18.04:LTSlinux-aws-fips4.15.0-2000.4, 0
Ubuntu:Pro:FIPS:18.04:LTSlinux-gcp-fips4.15.0-1001.1, 0
Ubuntu:18.04:LTSlinux-kvm4.15.0-1016.16, 4.15.0-1012.12, 4.15.0-1011.11
Ubuntu:Pro:14.04:LTSlinux3.13.0-192.243, 3.13.0-160.210, 3.13.0-161.211
Ubuntu:20.04:LTSlinux-riscv5.4.0-40.45, 0, 5.4.0-24.28
Ubuntu:18.04:LTSlinux-raspi24.15.0-1021.23, 4.15.0-1022.24, 4.15.0-1024.26
Ubuntu:16.04:LTSlinux-aws-hwe4.15.0-1035.37~16.04.1, 0, 4.15.0-1030.31~16.04.1
Ubuntu:20.04:LTSlinux-azure-fde5.4.0-1068.71+cvm1.1, 5.4.0-1069.72+cvm1.1, 5.4.0-1070.73+cvm1.1
Ubuntu:18.04:LTSlinux-aws4.15.0-1040.42, 4.15.0-1051.53, 4.15.0-1050.52
Ubuntu:Pro:14.04:LTSlinux-lts-xenial4.4.0-96.119~14.04.1, 4.4.0-92.115~14.04.1, 4.4.0-91.114~14.04.1
Ubuntu:18.04:LTSlinux-oracle0, 4.15.0-1008.10, 4.15.0-1009.11
Ubuntu:16.04:LTSlinux-gcp4.15.0-1030.32~16.04.1, 0, 4.10.0-1004.4
Ubuntu:22.04:LTSlinux-riscv5.13.0-1006.6+22.04.1, 5.15.0-1016.18, 5.15.0-1015.17
Ubuntu:16.04:LTSlinux-hwe4.15.0-52.56~16.04.1, 0, 4.8.0-36.36~16.04.1
Ubuntu:18.04:LTSlinux-oem-osp15.0.0-1015.16, 5.0.0-1018.20, 0
Ubuntu:20.04:LTSlinux-gke5.4.0-1056.59, 5.4.0-1059.62, 5.4.0-1061.64

…and 21 more

Timeline

References

Open in Interactive Console →