check_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.00136
Percentile: 0.34255

CVSS Scoring

Mapped CWE(s)

• CWE-674 : Uncontrolled Recursion

All CAPEC(s)

CAPEC(s) with Mapped TTPs

Mapped ATT&CK TTPs

Affected Products

• cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:-:*:*:*
• cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
• cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
• cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
• cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
• cpe:2.3:a:netapp:data_availability_services:-:*:*:*:*:*:*:*
• cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*
• cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*
• cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*

← Back to Home