Description
In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/card.c.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-1731-1 | linux security update |
Debian DLA |
DLA-1731-2 | linux regression update |
Debian DLA |
DLA-1771-1 | linux-4.9 security update |
EUVD |
EUVD-2018-11499 | In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/card.c. |
Ubuntu USN |
USN-3879-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-3879-2 | Linux kernel (Xenial HWE) vulnerabilities |
Ubuntu USN |
USN-3930-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-3930-2 | Linux kernel (HWE) vulnerabilities |
Ubuntu USN |
USN-3931-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-3931-2 | Linux kernel (HWE) vulnerabilities |
Ubuntu USN |
USN-3933-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-3933-2 | Linux kernel (Trusty HWE) vulnerabilities |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-05T11:44:20.701Z
Reserved: 2018-12-03T00:00:00.000Z
Link: CVE-2018-19824
No data.
Status : Modified
Published: 2018-12-03T17:29:00.517
Modified: 2024-11-21T03:58:37.943
Link: CVE-2018-19824
OpenCVE Enrichment
No data.
Weaknesses
Debian DLA
EUVD
Ubuntu USN