9.4

CVE-2019-15926

An issue was discovered in the Linux kernel before 5.2.3. Out of bounds access exists in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx in the file drivers/net/wireless/ath/ath6kl/wmi.c.

Data is provided by the National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 3.2 < 3.16.74
Linux ≫ Linux Kernel Version >= 3.17 < 4.4.187
Linux ≫ Linux Kernel Version >= 4.5 < 4.9.187
Linux ≫ Linux Kernel Version >= 4.10 < 4.14.135
Linux ≫ Linux Kernel Version >= 4.15 < 4.19.61
Linux ≫ Linux Kernel Version >= 4.20 < 5.1.20
Linux ≫ Linux Kernel Version >= 5.2.0 < 5.2.3
Debian ≫ Debian Linux Version8.0
Canonical ≫ Ubuntu Linux Version16.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version19.10
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 4.96% 0.893
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
nvd@nist.gov 9.4 10 9.2
AV:N/AC:L/Au:N/C:C/I:N/A:C
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://usn.ubuntu.com/4145-1/
Third Party Advisory
https://usn.ubuntu.com/4147-1/
Third Party Advisory