CVE-2019-15098 drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.
MediumCVSS 4.6
EPSS 0.75%
- Published
- Updated
- Exploit status
- No public exploit known
Description
drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 5.3.7-1 | 5.3.7-1 |
| debian/linux(Debian:13) | < 5.3.7-1 | 5.3.7-1 |
| debian/linux(Debian:14) | < 5.3.7-1 | 5.3.7-1 |
| Linux kernel | <= 5.2.9 | No fix listed |
| netapp active iq performance analytics services | All versions | No fix listed |
| netapp active iq unified manager | >= 9.5 | No fix listed |
| netapp data availability services | All versions | No fix listed |
| netapp element software | All versions | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| Canonical Ubuntu Linux | = 19.04 | No fix listed |
| openSUSE leap | = 15.0 | No fix listed |
| openSUSE leap | = 15.1 | No fix listed |
| debian linux | = 8.0 | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- USN-4184-1 vendor-advisory
- USN-4185-1 vendor-advisory
- USN-4186-1 vendor-advisory
- USN-4186-2 vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2019-15098 vendor-advisory
- openSUSE-SU-2019:2173 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2019:2181 mailing-list third-party-advisory vendor-advisory
- packetstormsecurity.com third-party-advisory vdb-entry
- [oss-security] 20190927 Re: Linux kernel: multiple vulnerabilities in the USB subsystem x2 mailing-list third-party-advisory
- [oss-security] 20190927 Re: Linux kernel: multiple vulnerabilities in the USB subsystem x2 mailing-list third-party-advisory
- [oss-security] 20190927 Re: Linux kernel: multiple vulnerabilities in the USB subsystem x2 mailing-list third-party-advisory
- [debian-lts-announce] 20200118 [SECURITY] [DLA 2068-1] linux security update mailing-list third-party-advisory
- [debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update mailing-list third-party-advisory
- lore.kernel.org
- 20191108 [slackware-security] Slackware 14.2 kernel (SSA:2019-311-01) broken-link mailing-list third-party-advisory
- security.netapp.com third-party-advisory
- support.f5.com third-party-advisory
- support.f5.com
- USN-4184-1 third-party-advisory vendor-advisory
- USN-4185-1 third-party-advisory vendor-advisory
- USN-4186-1 third-party-advisory vendor-advisory
- USN-4186-2 third-party-advisory vendor-advisory