parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Sep 25, 2019 | Aug 16, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernelUpgrade perfUpgrade bpftoolUpgrade python3-perfUpgrade kernel-sourceUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perf | Mar 24, 2020 | Aug 16, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 16, 2019 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-source-azure | Sep 3, 2019 | Aug 16, 2019 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1128-snapdragonUpgrade linux-image-raspi2Upgrade linux-image-powerpc-e500mcUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1066-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-166-lowlatencyUpgrade linux-image-5.0.0-31-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-66-genericUpgrade linux-image-4.4.0-166-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-oracleUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1052-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1049-raspi2Upgrade linux-image-gcpUpgrade linux-image-4.4.0-1060-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gke-5.0Upgrade linux-image-4.4.0-1056-awsUpgrade linux-image-5.0.0-1022-azureUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1061-azureUpgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-1020-gkeUpgrade linux-image-4.4.0-166-powerpc-smpUpgrade linux-image-4.4.0-166-genericUpgrade linux-image-4.4.0-166-powerpc-e500mcUpgrade linux-image-5.0.0-31-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-66-lowlatencyUpgrade linux-image-4.15.0-1046-gkeUpgrade linux-image-gke-4.15Upgrade linux-image-aws-hweUpgrade linux-image-4.4.0-166-powerpc64-embUpgrade linux-image-4.15.0-1027-oracleUpgrade linux-image-4.4.0-1124-raspi2Upgrade linux-image-4.15.0-1048-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.0.0-1020-gcpUpgrade linux-image-4.4.0-1096-awsUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-31-generic-lpaeUpgrade linux-image-4.15.0-1059-oemUpgrade linux-image-5.0.0-1019-raspi2Upgrade linux-image-4.4.0-166-powerpc64-smpUpgrade linux-image-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.0.0-1018-awsUpgrade linux-image-4.15.0-66-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.0.0-1019-kvmUpgrade linux-image-4.15.0-1047-gcpUpgrade linux-image-5.0.0-1023-snapdragon | Oct 5, 2019 | Aug 16, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub