peter bassill · operator
$ cve CVE-2019-15926 JSON

CVE-2019-15926

9.1
CRITICAL · CVSS 3.1 · EPSS 5.3% (pctl 92)

In your normal cycle

Critical by CVSS (9.1), but no sign of active exploitation.

Description

An issue was discovered in the Linux kernel before 5.2.3. Out of bounds access exists in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx in the file drivers/net/wireless/ath/ath6kl/wmi.c.

Scoring

CVSS9.1 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS5.25% — more likely to be exploited than 92% of all CVEs
WeaknessCWE-125
On CISA KEVno
Public exploitnone known
Published2019-09-04
Last modified2026-06-17

Affected (3)

VendorProduct
canonicalubuntu linux
debiandebian linux
linuxlinux kernel

References

→ the Explorer  ·  watch your stack  ·  NVD