CVE-2019-19528

CVSS v3.1 6.1 (Medium)

CVSS v2.0 5.6 (Medium)

EPSS 0.13 % (48^th)

Affected Products 1

Advisories 18

In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver, aka CID-edc4746f253d.

Weaknesses

CWE-416: Use After Free

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2019-12-03 16:15:13
(4 years ago)
Updated Date: 2020-03-31 14:01:38
(4 years ago)

Affected Products

Linux

Linux Kernel

Configuration #1

		CPE23	From	Up To
	Linux Kernel prior 5.3.7 version	cpe:2.3:o:linux:linux_kernel		< 5.3.7