CVE Database›Document archive›CVE-2019-15505

CVE-2019-15505

kernel: out of bounds read in drivers/media/usb/dvb-usb/technisat-usb2.c

Loading…

Severity

Moderate

Red Hat Product Security

8

CVSS 3.1

Review impact separately from score.

Published · August 23, 2019

Updated · June 28, 2026

Description

An out-of-bounds read flaw was found in the DVB USB subsystem of the Linux kernel. There was no boundary check applied to the array in struct technisat_usb2_state state->buf until the 0xff byte is encountered. If the byte is not encountered within the limit, an exposure of kernel data structure occurs. Data confidentiality and system availability are the highest threats with this vulnerability.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Mitigation for this issue is to skip loading the affected module technisat_usb2 onto the system till we have a fix available, this can be done by a blacklist mechanism, this will ensure the driver is not loaded at the boot time.

How do I blacklist a kernel module to prevent it from loading automatically? 
https://access.redhat.com/solutions/41278  

CVSS / CWE

CVSS 3.1 · 8
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

CWE-125 · Out-of-bounds Read