PT-2019-3105 · Linux+3 · Linux Kernel+3

Syzbot

·

Publicado

2019-07-29

·

Atualizado

2023-11-09

·

CVE-2019-15220

CVSS v2.0

4.9

Média

VetorAV:L/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.2.1
Description A use-after-free issue was discovered in the Linux kernel, specifically in the drivers/net/wireless/intersil/p54/p54usb.c driver, caused by a malicious USB device. This issue can lead to a denial of service.
Recommendations For Linux kernel versions prior to 5.2.1, update to version 5.2.1 or later to resolve the issue. As a temporary workaround, consider disabling the use of USB devices from untrusted sources to minimize the risk of exploitation. Restrict access to the p54usb.c driver to minimize the risk of denial of service.

Exploit

Correção

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2019-2321
ALT-PU-2019-2339
ALT-PU-2019-2488
ALT-PU-2019-2746
ALT-PU-2020-1198
ALT-PU-2020-1501
ALT-PU-2020-2410
ALT-PU-2020-2433
ALT-PU-2021-1870
BDU:2019-03088
CVE-2019-15220
DLA-1919-1
DLA-1919-2
DLA-1930-1
OPENSUSE-SU-2019:2173-1
OPENSUSE-SU-2019:2181-1
OPENSUSE-SU-2019_2173-1
OPENSUSE-SU-2019_2181-1
SUSE-SU-2019:2412-1
SUSE-SU-2019:2414-1
SUSE-SU-2019:2424-1
SUSE-SU-2019:2648-1
SUSE-SU-2019:2651-1
SUSE-SU-2019:2658-1
SUSE-SU-2019:2738-1
SUSE-SU-2019:2756-1
SUSE-SU-2019:2949-1
SUSE-SU-2019:2950-1
SUSE-SU-2019:2984-1
USN-4115-1
USN-4115-2
USN-4118-1
USN-4147-1
USN-4286-1
USN-4286-2

Produtos afetados

Alt Linux
Linux Kernel
Suse
Ubuntu