CVE-2018-19985

MEDIUM

Linux kernel <4.19.8 - Memory Corruption

Title source: llm
STIX 2.1

Description

The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object out-of-bounds (OOB) read that potentially allows arbitrary read in the kernel address space.

References (13)

Core 13
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:3517
Mailing List, Patch, Release Notes, Third Party Advisory x_refsource_misc
http://lists.opensuse.org/opensuse-security-announce/2019-01/msg00023.html
Mailing List, Patch, Release Notes, Third Party Advisory x_refsource_misc
http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00007.html
Mailing List, Patch, Third Party Advisory x_refsource_misc
https://seclists.org/bugtraq/2019/Jan/52
Patch, Third Party Advisory x_refsource_misc
https://hexhive.epfl.ch/projects/perifuzz/
Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20190404-0002/
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/4115-1/
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/4118-1/
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:3309

Scores

CVSS v3 4.6
EPSS 0.0004
EPSS Percentile 12.9%
Attack Vector PHYSICAL
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-125
Status published
Products (4)
debian/debian_linux 8.0
linux/linux_kernel < 4.19.8
netapp/active_iq_performance_analytics_services
netapp/element_software_management_node
Published Mar 21, 2019
Tracked Since Feb 18, 2026