From 30e923c9029fa0f9ba1976670c8ee73cbf02169e Mon Sep 17 00:00:00 2001 From: Salvatore Bonaccorso Date: Sun, 9 Feb 2020 21:22:45 +0100 Subject: Retire some CVEs --- retired/CVE-2019-15099 | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 retired/CVE-2019-15099 (limited to 'retired/CVE-2019-15099') diff --git a/retired/CVE-2019-15099 b/retired/CVE-2019-15099 new file mode 100644 index 000000000..ed10fdc38 --- /dev/null +++ b/retired/CVE-2019-15099 @@ -0,0 +1,15 @@ +Description: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe +References: + https://lore.kernel.org/linux-wireless/20190804003101.11541-1-benquike@gmail.com/T/#u +Notes: + bwh> Introduced in 4.14 by commit 4db66499df91 "ath10k: add initial USB + bwh> support". +Bugs: +upstream: released (5.5-rc1) [bfd6e6e6c5d2ee43a3d9902b36e01fc7527ebb27] +4.19-upstream-stable: released (4.19.87) [f0cfe98332d650f31b462207d63c496b4cedaee2] +4.9-upstream-stable: N/A "Vulnerable code not present" +3.16-upstream-stable: N/A "Vulnerable code not present" +sid: released (5.3.15-1) +4.19-buster-security: released (4.19.87-1) +4.9-stretch-security: N/A "Vulnerable code not present" +3.16-jessie-security: N/A "Vulnerable code not present" -- cgit v1.2.3