CVE-2019-15117

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.2.9

Description The issue is related to the parse audio mixer unit function in the sound/usb/mixer.c file of the Linux kernel, which mishandles a short descriptor, leading to out-of-bounds memory access. This can potentially allow an attacker to access confidential information or cause a denial of service.

Recommendations For Linux kernel versions through 5.2.9, update to a version newer than 5.2.9 to resolve the issue. At the moment, there is no information about other specific mitigation measures for this vulnerability.