Lucene search

K
f5F5F5:K13523672
HistorySep 09, 2019 - 12:00 a.m.

K13523672 : Linux kernel vulnerability CVE-2019-12454

2019-09-0900:00:00
my.f5.com
15

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

32.1%

Security Advisory Description

DISPUTED An issue was discovered in wcd9335_codec_enable_dec in sound/soc/codecs/wcd9335.c in the Linux kernel through 5.1.5. It uses kstrndup instead of kmemdup_nul, which allows attackers to have an unspecified impact via unknown vectors. NOTE: The vendor disputes this issues as not being a vulnerability because switching to kmemdup_nul() would only fix a security issue if the source string wasn’t NUL-terminated, which is not the case. (CVE-2019-12454)

Impact

There is no impact; F5 products are not affected by this vulnerability.

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

32.1%