CVE-2018-19985 The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object out-o...
MediumCVSS 4.6
EPSS 0.95%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object out-of-bounds (OOB) read that potentially allows arbitrary read in the kernel address space.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 4.19.13-1 | 4.19.13-1 |
| debian/linux(Debian:13) | < 4.19.13-1 | 4.19.13-1 |
| debian/linux(Debian:14) | < 4.19.13-1 | 4.19.13-1 |
| Linux kernel | <= 4.19.8 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| netapp active iq performance analytics services | All versions | No fix listed |
| netapp element software management node | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- USN-3910-1 vendor-advisory
- USN-3910-2 vendor-advisory
- USN-4115-1 vendor-advisory
- USN-4118-1 vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2018-19985 vendor-advisory
- lists.opensuse.org mailing-list patch release-notes third-party-advisory
- lists.opensuse.org mailing-list patch release-notes third-party-advisory
- packetstormsecurity.com release-notes third-party-advisory vdb-entry
- RHSA-2019:3309 vendor-advisory
- RHSA-2019:3517 vendor-advisory
- hexhive.epfl.ch patch third-party-advisory
- [debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security update mailing-list third-party-advisory
- [debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression update mailing-list third-party-advisory
- [debian-lts-announce] 20190503 [SECURITY] [DLA 1771-1] linux-4.9 security update mailing-list third-party-advisory
- seclists.org mailing-list patch third-party-advisory
- security.netapp.com third-party-advisory
- USN-4115-1 vendor-advisory
- USN-4118-1 vendor-advisory