In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers, aka CID-d9d4b1e46d95. This affects drivers/hid/hid-axff.c, drivers/hid/hid-dr.c, drivers/hid/hid-emsff.c, drivers/hid/hid-gaff.c, drivers/hid/hid-holtekff.c, drivers/hid/hid-lg2ff.c, drivers/hid/hid-lg3ff.c, drivers/hid/hid-lg4ff.c, drivers/hid/hid-lgff.c, drivers/hid/hid-logitech-hidpp.c, drivers/hid/hid-microsoft.c, drivers/hid/hid-sony.c, drivers/hid/hid-tmff.c, and drivers/hid/hid-zpff.c.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-19532.json"
[
{
"target": {
"file": "drivers/hid/hid-lg4ff.c",
"function": "lg4ff_init"
},
"digest": {
"length": 5084.0,
"function_hash": "54392659764728786064814620062991076932"
},
"signature_type": "Function",
"id": "CVE-2019-19532-00d09052",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-lg2ff.c"
},
"digest": {
"line_hashes": [
"132057858626749642122505529701400784048",
"271268982343332248632205173006959210657",
"79728499195386654771697038816798675274",
"334464698841690421307407653942669836410",
"175701364663892442214887971876111205937",
"6340681486450536051494050085557687927",
"72877853909068575979728892799726024527"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2019-19532-08bc22bc",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-tmff.c",
"function": "tmff_init"
},
"digest": {
"length": 1757.0,
"function_hash": "280281919410539777304422653377275944880"
},
"signature_type": "Function",
"id": "CVE-2019-19532-09eb8397",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-sony.c"
},
"digest": {
"line_hashes": [
"74228532430702994159732259661720064844",
"29601878210150063234099610225236320396",
"223527426215246920577954270830239047565",
"121833674281938754775278412004663232320",
"171194009861759035788951407137936624325",
"116197833942732857997570507264206776202"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2019-19532-0a37289b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-logitech-hidpp.c",
"function": "hidpp_ff_init"
},
"digest": {
"length": 2856.0,
"function_hash": "90316921724457405092582094581781235757"
},
"signature_type": "Function",
"id": "CVE-2019-19532-234ad42d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-dr.c"
},
"digest": {
"line_hashes": [
"336407094110616983942884142533199690640",
"299911211310057525073024101193664692150",
"231720402575710044661047635590904052220",
"200430614498530872432357903925506445297",
"209284612254649156408278178153956546795",
"175089093283630237763228444114357137149",
"47234077423505688018082643810537318679",
"238791798133948117715370449180324603045",
"73436270240136003819900107438750944979"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2019-19532-251a7ca2",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-lgff.c"
},
"digest": {
"line_hashes": [
"286823619902148827398009991334955834382",
"226570485853184031272957280280219008781",
"209231573423626035849498467827261217323",
"206106184847529266985139594883724929418",
"259791470533253379766193337271363478316",
"270861854812693747023403710938456104654",
"335795473194304756763260571154559124144",
"103953363206096522551211524001269562927"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2019-19532-2e4fc98e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-lg2ff.c",
"function": "lg2ff_init"
},
"digest": {
"length": 1012.0,
"function_hash": "93565189082907209323950597046011314529"
},
"signature_type": "Function",
"id": "CVE-2019-19532-389776a8",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-sony.c",
"function": "sony_init_ff"
},
"digest": {
"length": 272.0,
"function_hash": "295200623098521185750761687803949165547"
},
"signature_type": "Function",
"id": "CVE-2019-19532-38d9268f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-gaff.c"
},
"digest": {
"line_hashes": [
"325730959102599299067980008277688550635",
"71431868092551333844040200145433331209",
"43393295505333795926689694101190597609",
"45094748672892920543316259910030445402",
"279357390497302702537553955333097098870",
"290795675965691803369860286570963848543",
"181890990986647453105808060796232658935",
"43180511445309704034313729403943091077",
"238791798133948117715370449180324603045",
"73436270240136003819900107438750944979"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2019-19532-44fff853",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-lg4ff.c"
},
"digest": {
"line_hashes": [
"249610944820082316369902094114089507006",
"309408281640943950733687384972497590594",
"61815173516859703799439696354168453222",
"61680175579132297939900278319007026838",
"9898693079169971982232208343856475873",
"267977792170248704804699802519839208382",
"303872793246534426170265284137525626728",
"180491216860249621479149724694420477846"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2019-19532-6b08caf4",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-tmff.c"
},
"digest": {
"line_hashes": [
"312697079783773302117646246477470962776",
"240419610495541467490120071351656277717",
"27032038302200890758978001698562023239",
"55595062437863220577994936131677522634",
"279439348984020690950731693423207313367",
"29379845426074902198136798657934760714",
"22038548373735025994987917311483827533",
"67430838633488656907376102220880177376"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2019-19532-6cbc416f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-microsoft.c",
"function": "ms_init_ff"
},
"digest": {
"length": 574.0,
"function_hash": "309702596273087280779325262923134499660"
},
"signature_type": "Function",
"id": "CVE-2019-19532-6f3691c2",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-dr.c",
"function": "drff_init"
},
"digest": {
"length": 1425.0,
"function_hash": "127784748130755779522077330537492748194"
},
"signature_type": "Function",
"id": "CVE-2019-19532-715e113a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-holtekff.c",
"function": "holtekff_init"
},
"digest": {
"length": 1038.0,
"function_hash": "302224242057751964363478700304649270493"
},
"signature_type": "Function",
"id": "CVE-2019-19532-730acfbb",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-axff.c"
},
"digest": {
"line_hashes": [
"296918603577151216515003166837323721913",
"242053027890688031534072609136332072010",
"271287168861116601778905034740806510565",
"178235698082529165849739806027425641162",
"114698654031989387332094726464944418288",
"11685715634620242703892727493536253318",
"222554224702608744480680162492890743661",
"278536662882862798236949569854657725837",
"73436270240136003819900107438750944979"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2019-19532-8064ab83",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-lg3ff.c",
"function": "lg3ff_init"
},
"digest": {
"length": 704.0,
"function_hash": "188124341196419930562185983995179438246"
},
"signature_type": "Function",
"id": "CVE-2019-19532-936c5aa9",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-lgff.c",
"function": "lgff_init"
},
"digest": {
"length": 904.0,
"function_hash": "74732672216244030511047302837063650551"
},
"signature_type": "Function",
"id": "CVE-2019-19532-97e77ffb",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-logitech-hidpp.c"
},
"digest": {
"line_hashes": [
"8600410556395292508373308602265381584",
"182750101166778835112475787453523208733",
"252889438020800700686867410388045328944",
"319945994968382947820928398775263145888",
"146383668028679419792730329201533400099",
"145406776717564294393524813896346612476",
"270897917237431043711422718217252905442",
"332287123496681006739696019066405909134"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2019-19532-b093f213",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-lg3ff.c"
},
"digest": {
"line_hashes": [
"3656915969012515946392947911568480217",
"254473990906100817981805304854070693738",
"90898735022454659038108906006316432748",
"75426319257021988866193664354018145538",
"101295075281668604214491947486756101729",
"54975443955189621444520698170742698946",
"186519297067395832563196655353562658971",
"174027946300005545864881164088021870820"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2019-19532-b9123f1b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-zpff.c",
"function": "zpff_init"
},
"digest": {
"length": 959.0,
"function_hash": "161399874806990764486687066606626286681"
},
"signature_type": "Function",
"id": "CVE-2019-19532-cdfa3d8e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-emsff.c",
"function": "emsff_init"
},
"digest": {
"length": 1404.0,
"function_hash": "110357791345959206716780286026111015181"
},
"signature_type": "Function",
"id": "CVE-2019-19532-ce40741a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-holtekff.c"
},
"digest": {
"line_hashes": [
"136433972850855031412759412373043509199",
"126467920495663366302531071792975712908",
"43393295505333795926689694101190597609",
"45094748672892920543316259910030445402",
"209284612254649156408278178153956546795",
"175089093283630237763228444114357137149",
"47234077423505688018082643810537318679",
"19227307489540970436167908941682718782",
"61436349016059000619316632681858430610"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2019-19532-d5afbff6",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-gaff.c",
"function": "gaff_init"
},
"digest": {
"length": 1456.0,
"function_hash": "205551277747256610219829885032117194523"
},
"signature_type": "Function",
"id": "CVE-2019-19532-dce4d59b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-zpff.c"
},
"digest": {
"line_hashes": [
"91696640223783283606226946221944635282",
"325084775217317858973018459876210247456",
"79728499195386654771697038816798675274",
"196913660616713524711962929608547188113",
"214049774174711561039687358734793189086",
"248369071982115513383496961379034598843",
"221832866088090625162028583835365899119"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2019-19532-dcf4c789",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-emsff.c"
},
"digest": {
"line_hashes": [
"293388251072345518040419115412868787759",
"242767511818657894971852832019172683900",
"231720402575710044661047635590904052220",
"200430614498530872432357903925506445297",
"209284612254649156408278178153956546795",
"175089093283630237763228444114357137149",
"47234077423505688018082643810537318679",
"238791798133948117715370449180324603045",
"73436270240136003819900107438750944979"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2019-19532-e0673c84",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-axff.c",
"function": "axff_init"
},
"digest": {
"length": 1210.0,
"function_hash": "226023086940339125399988245683298793919"
},
"signature_type": "Function",
"id": "CVE-2019-19532-e76ce32d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "drivers/hid/hid-microsoft.c"
},
"digest": {
"line_hashes": [
"7226453434924923443169484543396740166",
"292452949066828644030818758256897704608",
"154013192836048703873598102133662389200",
"56980578946617486210448045486786988553",
"201352112699107806280072062466283843197",
"167695681345645334494102397261512934008",
"81401395139852047446135382994266782238"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2019-19532-f8f7cfe1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@d9d4b1e46d9543a82c23f6df03f4ad697dab361b",
"deprecated": false,
"signature_version": "v1"
}
]