Debian/linux: medium 4.6
The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object out-o
Action: Upgrade linux to 4.19.13-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.19.13-1 | - |
Fixed versions
| 4.19.13-1 |
Sources
- osv: DEBIAN-CVE-2018-19985#Debian:13/linux
- https://security-tracker.debian.org/tracker/CVE-2018-19985
published · modified · JSON