PT-2019-3110 · Linux+3 · Linux Kernel+3

Syzbot

·

Publicado

2019-08-05

·

Atualizado

2023-11-09

·

CVE-2019-15215

CVSS v2.0

4.9

Média

VetorAV:L/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.2.6
Description The issue is related to a use-after-free error in the Linux kernel, specifically in the drivers/media/usb/cpia2/cpia2 usb.c driver. This error occurs when a malicious USB device is used, allowing an attacker to potentially cause a denial of service.
Recommendations For Linux kernel versions prior to 5.2.6, update to version 5.2.6 or later to resolve the issue.

Exploit

Correção

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2019-2366
ALT-PU-2019-2441
ALT-PU-2019-2488
ALT-PU-2019-2746
ALT-PU-2020-1198
ALT-PU-2020-1501
ALT-PU-2020-2410
ALT-PU-2020-2433
ALT-PU-2021-1870
BDU:2019-03093
CVE-2019-15215
DLA-1919-1
DLA-1919-2
DLA-1930-1
OPENSUSE-SU-2019:2173-1
OPENSUSE-SU-2019:2181-1
OPENSUSE-SU-2019_2173-1
OPENSUSE-SU-2019_2181-1
SUSE-SU-2019:2412-1
SUSE-SU-2019:2414-1
SUSE-SU-2019:2424-1
SUSE-SU-2019:2648-1
SUSE-SU-2019:2651-1
SUSE-SU-2019:2658-1
SUSE-SU-2019:2738-1
SUSE-SU-2019:2756-1
SUSE-SU-2019:2949-1
SUSE-SU-2019:2950-1
SUSE-SU-2019:2984-1
USN-4115-1
USN-4115-2
USN-4118-1
USN-4145-1
USN-4147-1

Produtos afetados

Alt Linux
Linux Kernel
Suse
Ubuntu