Out-of-bounds read in Linux kernel - CVE-2019-15505

Vulnerability identifier: #VU21630

CSH Severity: Low

CVSS v4: 2.4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-15505

CWE-ID: CWE-125

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the drivers/media/usb/dvb-usb/technisat-usb2.c USB driver in Linux kernel. A local user can use a specially crafted USB device to trigger out-of-bounds read error during data transfer and read contents of memory on the system.

Linux kernel
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for ARM 64
Anolis OS
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for Real Time
Slackware Linux
Ubuntu
Fedora
Juniper Secure Analytics (JSA)
BIG-IP
linux (Ubuntu package)
linux-raspi2 (Ubuntu package)
linux-aws (Ubuntu package)
linux-kvm (Ubuntu package)
linux-snapdragon (Ubuntu package)
linux-hwe (Ubuntu package)
linux-gcp (Ubuntu package)
linux-azure (Ubuntu package)
linux-oem (Ubuntu package)
linux-oracle (Ubuntu package)
linux-gke-4.15 (Ubuntu package)
linux-aws-hwe (Ubuntu package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
kernel-debug-devel
perf
kernel-tools-libs-devel
kernel-tools-libs
kernel-tools
kernel-modules-extra
kernel-modules
kernel-headers
kernel-devel
kernel-debug-modules-extra
kernel-debug-modules
kernel-debug-core
kernel-debug
kernel-cross-headers
kernel-core
kernel
bpftool
python3-perf
kernel-abi-stablelists
kernel-doc
linux-4.4.199/kernel-modules
linux-4.4.199/kernel-generic
linux-4.4.199/kernel-huge
linux-4.4.199/kernel-headers
Technical Support Appliance
IBM Cloud Pak for Watson AIOps
IBM Qradar SIEM
RSA Authentication Manager

Install updates from vendor's website.

Linux kernel - update to 5.2.10
Juniper Secure Analytics (JSA) - update to 7.5.0 UP8 IF03
linux (Ubuntu package) - addressed in versions 4.4.0-166.195, 4.15.0-66.75, 5.0.0-32.34
linux-raspi2 (Ubuntu package) - addressed in versions 4.4.0-1124.133, 4.15.0-1049.53
linux-aws (Ubuntu package) - addressed in versions 4.4.0-1096.107, 4.15.0-1052.54, 5.0.0-1019.21
linux-kvm (Ubuntu package) - addressed in versions 4.4.0-1060.67, 4.15.0-1048.48, 5.0.0-1020.21
linux-snapdragon (Ubuntu package) - addressed in versions 4.4.0-1128.136, 4.15.0-1066.73, 5.0.0-1024.25
linux-hwe (Ubuntu package) - update to 4.15.0-66.75~16.04.1
linux-gcp (Ubuntu package) - addressed in versions 4.15.0-1047.50, 5.0.0-1021.21
linux-azure (Ubuntu package) - addressed in versions 4.15.0-1061.66, 5.0.0-1023.24
linux-oem (Ubuntu package) - update to 4.15.0-1059.68
linux-oracle (Ubuntu package) - addressed in versions 4.15.0-1027.30~16.04.1, 4.15.0-1027.30
linux-gke-4.15 (Ubuntu package) - update to 4.15.0-1046.49
linux-aws-hwe (Ubuntu package) - update to 4.15.0-1052.54~16.04.1
kernel (Red Hat package) - update to 4.18.0-553.el8_10
kernel-rt (Red Hat package) - update to 4.18.0-553.rt7.342.el8_10
kernel-debug-devel - update to 4.18.0-553.5.1.0.1
perf - update to 4.18.0-553.5.1.0.1
kernel-tools-libs-devel - update to 4.18.0-553.5.1.0.1
kernel-tools-libs - update to 4.18.0-553.5.1.0.1
kernel-tools - update to 4.18.0-553.5.1.0.1
kernel-modules-extra - update to 4.18.0-553.5.1.0.1
kernel-modules - update to 4.18.0-553.5.1.0.1
kernel-headers - update to 4.18.0-553.5.1.0.1
kernel-devel - update to 4.18.0-553.5.1.0.1
kernel-debug-modules-extra - update to 4.18.0-553.5.1.0.1
kernel-debug-modules - update to 4.18.0-553.5.1.0.1
kernel-debug-core - update to 4.18.0-553.5.1.0.1
kernel-debug - update to 4.18.0-553.5.1.0.1
kernel-cross-headers - update to 4.18.0-553.5.1.0.1
kernel-core - update to 4.18.0-553.5.1.0.1
kernel - update to 4.18.0-553.5.1.0.1
bpftool - update to 4.18.0-553.5.1.0.1
python3-perf - update to 4.18.0-553.5.1.0.1
kernel-abi-stablelists - update to 4.18.0-553.5.1.0.1
kernel-doc - update to 4.18.0-553.5.1.0.1
kernel-headers - addressed in versions 5.2.11-100.fc29, 5.2.11-200.fc30
kernel - addressed in versions 5.2.11-100.fc29, 5.2.11-200.fc30
kernel-tools - addressed in versions 5.2.11-100.fc29, 5.2.11-200.fc30
Technical Support Appliance - update to 3.0.1
IBM Cloud Pak for Watson AIOps - update to 4.6.0
IBM Qradar SIEM - update to 7.5.0 Update Pack 8 IF03
RSA Authentication Manager - update to 8.4 Patch 9
linux-4.4.199/kernel-modules - update to 4.4.199
linux-4.4.199/kernel-generic - update to 4.4.199
linux-4.4.199/kernel-huge - update to 4.4.199
linux-4.4.199/kernel-headers - update to 4.4.199_smp

• https://git.linuxtv.org/media_tree.git/commit/?id=0c4df39e504bf925ab666132ac3c98d6cbbe380b
• https://lore.kernel.org/linux-media/20190821104408.w7krumcglxo6fz5q@gofer.mess.org/
• https://lore.kernel.org/lkml/b9b256cb-95f2-5fa1-9956-5a602a017c11@gmail.com/

• Information disclosure in USB kernel driver in F5 Networks BIG-IP products
• Red Hat Enterprise Linux 8 update for kernel-rt
• Red Hat Enterprise Linux 8 update for kernel
• Multiple vulnerabilities in Juniper Secure Analytics (JSA)
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• Multiple vulnerabilities in IBM Technical Suppport Appliance
• Anolis OS update for kernel
• Slackware Linux update for kernel
• Fedora 30 update for kernel, kernel-headers, kernel-tools
• Fedora 29 update for kernel, kernel-headers, kernel-tools
• RSA Authentication Manager update for third-party components
• Ubuntu update for linux, linux-aws, linux-azure and more
• Ubuntu update for linux, linux-aws, linux-kvm and more
• Ubuntu update for linux, linux-aws, linux-aws-hwe and more