CVE-2019-19537

CVSS v3.1 4.2 (Medium)

CVSS v2.0 4.7 (Medium)

EPSS 0.18 % (56^th)

Affected Products 1

Advisories 22

In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer, aka CID-303911cfc5b9. This affects drivers/usb/core/file.c.

Weaknesses

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2019-12-03 16:15:13
(4 years ago)
Updated Date: 2020-01-18 07:15:15
(4 years ago)

Affected Products

Linux

Linux Kernel

Configuration #1

		CPE23	From	Up To
	Linux Kernel prior 5.2.10 version	cpe:2.3:o:linux:linux_kernel		< 5.2.10