Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2019-15926

32
FAUCET Score

CVE-2019-15926 is a critical out-of-bounds access vulnerability in the Linux kernel before version 5.2.3, specifically affecting the ath6kl wireless driver. This flaw impacts various distributions including Canonical and Debian Linux. With a CVSS score of 9.1 (CRITICAL), it can be exploited remotely without user interaction, potentially leading to high confidentiality and availability impacts. Despite its severity and significant community discussion (10 mentions), there is currently no public exploit code available, nor is it listed on CISA's KEV catalog or being actively exploited.

Impacted Technologies

VendorProductVersion(s)CPE
>= 3.2, < 3.16.74CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 3.17, < 4.4.187CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 4.5, < 4.9.187CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 4.10, < 4.14.135CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 4.15, < 4.19.61CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

9.1CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.2
CvssVersion
3.1

Exploit Intelligence

EPSS Score
5.19%
Probability of exploitation in next 30 days
EPSS Percentile
91.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0519 is in the 86th percentile among its peer group of 36,897 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Advisories (1)

redhatCVE-2019-15926Moderate

kernel: out of bounds access in functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx

Sep 4, 2019

References

lists.opensuse.org / opensuse-security-announce/2019-09/msg00064.html
Mailing ListThird Party Advisory
lists.opensuse.org / opensuse-security-announce/2019-09/msg00066.html
Mailing ListThird Party Advisory
cdn.kernel.org / pub/linux/kernel/v5.x/ChangeLog-5.2.3
Mailing ListVendor Advisory
git.kernel.org / pub/scm/linux/kernel/git/torvalds/linux.git/commit
Mailing ListPatchVendor Advisory
lists.debian.org / debian-lts-announce/2019/09/msg00014.html
Mailing ListThird Party Advisory
lists.debian.org / debian-lts-announce/2019/09/msg00015.html
Mailing ListThird Party Advisory
lists.debian.org / debian-lts-announce/2019/09/msg00025.html
Third Party Advisory
security.netapp.com / advisory/ntap-20191004-0001
Third Party Advisory
support.f5.com / csp/article/K32034450
Third Party Advisory
support.f5.com / csp/article/K32034450
usn.ubuntu.com / 4145-1
Third Party Advisory
usn.ubuntu.com / 4147-1
Third Party Advisory