CVE-2018-19985

The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a…

published March 17, 2019

CVSS
—
EPSS
1%
Percentile
60.7
In the wild
Unconfirmed
What it is

The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object out-of-bounds (OOB) read that potentially allows arbitrary read in the kernel address space.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00953 · 60.7th percentile
Published
2019-03-17T19:48Z
EPSS history
Timeline
  • 17 MAR 19:48Z
    The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a…
    cvelistv5