vulnerability

Red Hat OpenShift: CVE-2018-19824: kernel: Use-after-free in sound/usb/card.c:usb_audio_probe()

Name: Red Hat OpenShift: CVE-2018-19824: kernel: Use-after-free in sound/usb/card.c:usb_audio_probe()
Creator: Red Hat
Published: 2018-12-03T00:00:00.000Z
Keywords: CVE, CWE-416, Red Hat OpenShift, 2018, 19824, kernel, linuxrpm-upgrade-redhat-coreos, Severity 5

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:L/Au:N/C:P/I:P/A:P)

Published

Dec 3, 2018

Added

Dec 29, 2020

Modified

Mar 30, 2026

Description

In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/card.c.

Solution

linuxrpm-upgrade-redhat-coreos

References

CVE-2018-19824
https://attackerkb.com/topics/CVE-2018-19824
CWE-416
EUVD-EUVD-2018-11499
REDHAT-RHSA-2019:2703
REDHAT-RHSA-2019:2741
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-11499

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report