An issue was discovered in wcd9335_codec_enable_dec in sound/soc/codecs/wcd9335.c in the Linux kernel through 5.1.5. It uses kstrndup instead of kmemdup_nul, which allows attackers to have an unspecified impact via unknown vectors. NOTE: The vendor disputes this issues as not being a vulnerability because switching to kmemdup_nul() would only fix a security issue if the source string wasn't NUL-terminated, which is not the case

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in wcd9335_codec_enable_dec in sound/soc/codecs/wcd9335.c in the Linux kernel     through 5.1.5. It uses kstrndup instead of kmemdup_nul, which allows attackers to have an unspecified     impact via unknown vectors. NOTE: The vendor disputes this issues as not being a vulnerability because     switching to kmemdup_nul() would only fix a security issue if the source string wasn't NUL-terminated,     which is not the case (CVE-2019-12454)

Note that Nessus relies on the presence of the package as reported by the vendor.

Update to v5.1.8

----

Update to v5.1.7

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to v5.1.7

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
251898	Linux Distros Unpatched Vulnerability : CVE-2019-12454	Nessus	Misc.	high
125863	Fedora 29 : kernel / kernel-headers (2019-83858fc57b)	Nessus	Fedora Local Security Checks	high
125790	Fedora 30 : kernel / kernel-headers (2019-f40bd7826f)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2019-12454

high

Tenable Plugins

high

high

high