CVE-2019-15926: Canonical Ubuntu Linux

Critical severity, CVSS 9.1. EPSS: 5.3% chance of exploitation in the next 30 days.

An issue was discovered in the Linux kernel before 5.2.3. Out of bounds access exists in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx in the file drivers/net/wireless/ath/ath6kl/wmi.c.

Affected products

• Canonical Ubuntu Linux: version 16.04 only; version 18.04 only; version 19.10 only
• Debian Debian Linux: version 8.0 only
• Linux Linux Kernel: from 3.2, before 3.16.74 (fixed in 3.16.74); from 3.17, before 4.4.187 (fixed in 4.4.187); from 4.5, before 4.9.187 (fixed in 4.9.187); from 4.10, before 4.14.135 (fixed in 4.14.135); from 4.15, before 4.19.61 (fixed in 4.19.61); from 4.20, before 5.1.20 (fixed in 5.1.20); …

Published 2019-09-04. Last modified 2026-06-17.