NetSight
IP …
medium6.8

CVE-2019-19527

In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CI…

Impact

In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.30 before 3.16.79
from 3.17 before 4.4.190
from 4.5 before 4.9.190
from 4.10 before 4.14.140
from 4.15 before 4.19.68
from 4.20 before 5.2.10
DebianDebian Linux
Version 8.0
OpensuseLeap
Version 15.1

Weakness classification

CWE-416

References