parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Sep 25, 2019 | Aug 16, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-sourceUpgrade kernel-headersUpgrade bpftoolUpgrade kernelUpgrade perfUpgrade python3-perfUpgrade kernel-devel | Mar 24, 2020 | Aug 16, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 16, 2019 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-devel-azure | Sep 3, 2019 | Aug 16, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1047-gcpUpgrade linux-image-4.4.0-166-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.4.0-166-powerpc64-embUpgrade linux-image-4.15.0-66-lowlatencyUpgrade linux-image-4.15.0-66-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-azureUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-1018-awsUpgrade linux-image-4.15.0-1048-kvmUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-31-generic-lpaeUpgrade linux-image-4.15.0-1059-oemUpgrade linux-image-5.0.0-1019-raspi2Upgrade linux-image-5.0.0-1020-gcpUpgrade linux-image-4.15.0-1027-oracleUpgrade linux-image-4.4.0-1124-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-166-powerpc-smpUpgrade linux-image-4.15.0-1046-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1019-kvmUpgrade linux-image-5.0.0-1023-snapdragonUpgrade linux-image-5.0.0-31-genericUpgrade linux-image-4.4.0-166-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-166-genericUpgrade linux-image-4.4.0-1096-awsUpgrade linux-image-5.0.0-31-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-4.4.0-166-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1128-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1052-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-kvmUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-66-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1066-snapdragonUpgrade linux-image-oracleUpgrade linux-image-4.4.0-1060-kvmUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.0.0-1022-azureUpgrade linux-image-4.4.0-1056-awsUpgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-gke-5.0Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1049-raspi2Upgrade linux-image-5.0.0-1020-gkeUpgrade linux-image-powerpc-smpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-166-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1061-azureUpgrade linux-image-virtual-lts-xenial | Oct 5, 2019 | Aug 16, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub