In parse_hid_report_descriptor in drivers/input/tablet/gtco.c in the Linux kernel through 5.2.1, a malicious USB device can send an HID report that triggers an out-of-bounds write during generation of debugging messages.
Advisories
Source ID Title
Debian DLA Debian DLA DLA-1884-1 linux security update
Debian DLA Debian DLA DLA-1885-1 linux-4.9 security update
Debian DSA Debian DSA DSA-4495-1 linux security update
Debian DSA Debian DSA DSA-4497-1 linux security update
EUVD EUVD EUVD-2019-5061 In parse_hid_report_descriptor in drivers/input/tablet/gtco.c in the Linux kernel through 5.2.1, a malicious USB device can send an HID report that triggers an out-of-bounds write during generation of debugging messages.
Ubuntu USN Ubuntu USN USN-4115-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-4118-1 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-4145-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-4147-1 Linux kernel vulnerabilities
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-04T23:57:39.644Z

Reserved: 2019-07-17T00:00:00

Link: CVE-2019-13631

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-07-17T19:15:11.977

Modified: 2024-11-21T04:25:24.213

Link: CVE-2019-13631

cve-icon Redhat

Severity : Moderate

Publid Date: 2019-07-11T00:00:00Z

Links: CVE-2019-13631 - Bugzilla

cve-icon OpenCVE Enrichment

No data.