basesockcreate in drivers/isdn/mISDN/socket.c in the AFISDN network module in the Linux kernel through 5.3.2 does not enforce CAPNET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-17055.json"
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@b91ee4aa2a2199ba4d4650706c272985a5a32d80",
"deprecated": false,
"id": "CVE-2019-17055-58061253",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "drivers/isdn/mISDN/socket.c",
"function": "base_sock_create"
},
"digest": {
"length": 500.0,
"function_hash": "307879409509205880560588002520963033032"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@b91ee4aa2a2199ba4d4650706c272985a5a32d80",
"deprecated": false,
"id": "CVE-2019-17055-e6b89cfc",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/isdn/mISDN/socket.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"41728665283194970865134113236981462375",
"111730941350384650475599195742361034565",
"65683377857108249308898328599884918236",
"47061273071044776445298565590626130864"
]
}
}
]