CVSS: 10.0EPSS: 3%CPEs: 4EXPL: 0CVE-2019-15504 – Ubuntu Security Notice USN-4157-1
https://notcve.org/view.php?id=CVE-2019-15504
23 Aug 2019 — drivers/net/wireless/rsi/rsi_91x_usb.c in the Linux kernel through 5.2.9 has a Double Free via crafted USB device traffic (which may be remote via usbip or usbredir). drivers/net/wireless/rsi/rsi_91x_usb.c en el kernel de Linux hasta la versión 5.2.9 tiene un Double Free a través del tráfico de dispositivos USB diseñado (que puede ser remoto a través de usbip o usbredir). Wen Huang discovered that the Marvell Wi-Fi device driver in the Linux kernel did not properly perform bounds checking, leading to a heap... • https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3RUDQJXRJQVGHCGR4YZWTQ3ECBI7TXH • CWE-415: Double Free •
CVSS: 4.9EPSS: 0%CPEs: 1EXPL: 1CVE-2019-15291 – Slackware Security Advisory - Slackware 14.2 kernel Updates
https://notcve.org/view.php?id=CVE-2019-15291
20 Aug 2019 — An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver. Se descubrió un problema en el kernel de Linux hasta la versión 5.2.9. Hay una desreferencia de puntero NULL causada por un dispositivo USB malicioso en la función flexcop_usb_probe en el controlador drivers / media / usb / b2c2 / flexcop-usb.c. It was discovered that the Atheros 802.11ac wireless... • http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html • CWE-476: NULL Pointer Dereference •
CVSS: 4.9EPSS: 0%CPEs: 13EXPL: 1CVE-2019-15211 – Ubuntu Security Notice USN-4145-1
https://notcve.org/view.php?id=CVE-2019-15211
19 Aug 2019 — An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver because drivers/media/radio/radio-raremono.c does not properly allocate memory. Se descubrió un problema en el kernel de Linux versiones anteriores a 5.2.6. Se presenta un uso de memoria previamente liberada causado por un dispositivo USB malicioso en el controlador drivers/media/v4l2-core/v4l2-dev.c porque el archivo drivers/media/radio/radio-... • http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html • CWE-416: Use After Free •
CVSS: 4.9EPSS: 0%CPEs: 8EXPL: 1CVE-2019-15213
https://notcve.org/view.php?id=CVE-2019-15213
19 Aug 2019 — An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver. Se descubrió un problema en el kernel de Linux versiones anteriores a 5.2.3. Se presenta un uso de memoria previamente liberada causado por un dispositivo USB malicioso en el controlador drivers/media/usb/dvb-usb/dvb-usb-init.c. • http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html • CWE-416: Use After Free •
CVSS: 4.9EPSS: 0%CPEs: 13EXPL: 1CVE-2019-15215 – Ubuntu Security Notice USN-4145-1
https://notcve.org/view.php?id=CVE-2019-15215
19 Aug 2019 — An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2_usb.c driver. Se descubrió un problema en el kernel de Linux versiones anteriores a 5.2.6. Se presenta un uso de memoria previamente liberada causado por un dispositivo USB malicioso en el controlador drivers/media/usb/cpia2/cpia2_usb.c . It was discovered that the alarmtimer implementation in the Linux kernel contained an integer overflow vulnerability. • http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html • CWE-416: Use After Free •
CVSS: 4.9EPSS: 0%CPEs: 14EXPL: 1CVE-2019-15217 – kernel: null pointer dereference in drivers/media/usb/zr364xx/zr364xx.c driver
https://notcve.org/view.php?id=CVE-2019-15217
19 Aug 2019 — An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver. Se descubrió un problema en el kernel de Linux versiones anteriores a 5.2.3. Se presenta una desreferencia del puntero NULL causada por un dispositivo USB malicioso en el controlador drivers/media/usb/zr364xx/zr364xx.c . A vulnerability was found in the Linux kernel. • http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html • CWE-476: NULL Pointer Dereference •
CVSS: 4.9EPSS: 0%CPEs: 14EXPL: 1CVE-2019-15220 – Ubuntu Security Notice USN-4147-1
https://notcve.org/view.php?id=CVE-2019-15220
19 Aug 2019 — An issue was discovered in the Linux kernel before 5.2.1. There is a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb.c driver. Se descubrió un problema en el kernel de Linux versiones anteriores a 5.2.1. Se presenta un uso de memoria previamente liberada causado por un dispositivo USB malicioso en el controlador drivers/net/wireless/intersil/p54/p54usb.c . It was discovered that the alarmtimer implementation in the Linux kernel contained an integer overflow vu... • http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html • CWE-416: Use After Free •
CVSS: 4.9EPSS: 0%CPEs: 9EXPL: 1CVE-2019-15222
https://notcve.org/view.php?id=CVE-2019-15222
19 Aug 2019 — An issue was discovered in the Linux kernel before 5.2.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/helper.c (motu_microbookii) driver. Se descubrió un problema en el kernel de Linux versiones anteriores a 5.2.8. Se presenta una desreferencia del puntero NULL causada por un dispositivo USB malicioso en el controlador sound/usb/helper.c (motu_microbookii). • http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html • CWE-476: NULL Pointer Dereference •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2019-15117 – Ubuntu Security Notice USN-4147-1
https://notcve.org/view.php?id=CVE-2019-15117
16 Aug 2019 — parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access. La función parse_audio_mixer_unit en el archivo sound/usb/mixer.c en el kernel de Linux versiones hasta 5.2.9, maneja inapropiadamente un descriptor corto, conllevando a un acceso a la memoria fuera de límites. It was discovered that the RSI 91x Wi-Fi driver in the Linux kernel did not did not handle detach operations correctly, leading to a use-after-free vuln... • http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.5EPSS: 0%CPEs: 18EXPL: 0CVE-2019-15118 – Ubuntu Security Notice USN-4147-1
https://notcve.org/view.php?id=CVE-2019-15118
16 Aug 2019 — check_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion. La función check_input_term en el archivo sound/usb/mixer.c en el kernel de Linux versiones hasta 5.2.9, maneja inapropiadamente la recursión, conllevando al agotamiento de la pila del kernel. It was discovered that the RSI 91x Wi-Fi driver in the Linux kernel did not did not handle detach operations correctly, leading to a use-after-free vulnerability. A physically proximate att... • http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html • CWE-674: Uncontrolled Recursion •