CVE-2019-11884
Low
Description
The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel before 5.0.15 allows a local user to obtain potentially sensitive information from kernel stack memory via a HIDPCONNADD command, because a name field may not end with a '\0' character.
SeverityLow
CVSS3.3
Exploit probability—
Product
Linux Kernel
PublishedMay 10, 2019
First seenMay 10, 2019
How to fix
Update
- linux linux_kernel5.0.15 or later
Vendor advisories
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAYXGGJUUYPOMCBZGGDCUZFLUU3JOZG5/
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF2PDXUGOFEOTPVEACKFIHQB6O4XUIZD/
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KPWHQHNM2MSGO3FDJVIQXQNKYVR7TV45/
- debian.org/security/2019/dsa-4465
- usn.ubuntu.com/4068-1/
- usn.ubuntu.com/4068-2/
- usn.ubuntu.com/4069-1/
- usn.ubuntu.com/4076-1/
- usn.ubuntu.com/4069-2/
- usn.ubuntu.com/4118-1/
- access.redhat.com/errata/RHSA-2019:3309
- access.redhat.com/errata/RHSA-2019:3517
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | v < 5.0.15 | 5.0.15 |
| fedoraproject fedora | 28, 29, 30 | — |
| debian debian_linux | 8.0, 9.0 | — |
| canonical ubuntu_linux | 16.04, 18.04, 19.04 | — |
| redhat enterprise_linux | 8.0 | — |
| redhat enterprise_linux_eus | 8.1, 8.2, 8.4, 8.6 | — |
| redhat enterprise_linux_for_real_time | 8.0 | — |
| redhat enterprise_linux_for_real_time_for_nfv_tus | 8.2, 8.4, 8.6 | — |
| redhat enterprise_linux_for_real_time_tus | 8.2, 8.4, 8.6 | — |
| redhat enterprise_linux_server_aus | 8.2, 8.4, 8.6 | — |
| redhat enterprise_linux_server_tus | 8.2, 8.4, 8.6 | — |
| opensuse leap | 15.0, 15.1, 42.3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.