ISOMAN

CVE

CVE-2018-19824

In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/card.c.

Severity
HIGH
CVSS
7.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://www.securityfocus.com/bid/106109
  2. https://access.redhat.com/errata/RHSA-2019:2703
  3. https://bugzilla.suse.com/show_bug.cgi?id=1118152
  4. https://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound.git/commit/?id=5f8cf712582617d523120df67d392059eaf2fc4b
  5. https://github.com/torvalds/linux/commit/5f8cf712582617d523120df67d392059eaf2fc4b
  6. https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html
  7. https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html
  8. https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html
  9. https://support.f5.com/csp/article/K98155950
  10. https://usn.ubuntu.com/3879-1/
  11. https://usn.ubuntu.com/3879-2/
  12. https://usn.ubuntu.com/3930-1/
  13. https://usn.ubuntu.com/3930-2/
  14. https://usn.ubuntu.com/3931-1/
  15. https://usn.ubuntu.com/3931-2/
  16. https://usn.ubuntu.com/3933-1/
  17. https://usn.ubuntu.com/3933-2/
  18. http://www.securityfocus.com/bid/106109
  19. https://access.redhat.com/errata/RHSA-2019:2703
  20. https://bugzilla.suse.com/show_bug.cgi?id=1118152