Wind River Support Network

HomeDefectsLIN1019-1399
Fixed

LIN1019-1399 : Security Advisory - linux - CVE-2019-12454

Created: May 30, 2019    Updated: Nov 16, 2019
Resolved Date: Nov 16, 2019
Found In Version: 10.19.45.1
Fix Version: 10.19.45.1
Severity: Standard
Applicable for: Wind River Linux LTS 19
Component/s: Kernel

Description

An issue was discovered in wcd9335_codec_enable_dec in sound/soc/codecs/wcd9335.c in the Linux kernel through 5.1.5. It uses kstrndup instead of kmemdup_nul, which allows attackers to have an unspecified impact via unknown vectors.

CREATE(Triage):
{Link=https://nvd.nist.gov/vuln/detail/CVE-2019-12454 User=admin} 

CVEs


Live chat
Online