CVE-2019-15211: Use After Free
An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver because drivers/media/radio/radio-raremono.c does not properly allocate memory.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 5.2.6
Event History
Frequently Asked Questions
What is the severity of CVE-2019-15211?
CVE-2019-15211 is classified as a high severity vulnerability due to its potential to cause a use-after-free condition in the Linux kernel.
How do I fix CVE-2019-15211?
To resolve CVE-2019-15211, upgrade to kernel versions 5.2.6 or higher.
What versions of the Linux kernel are affected by CVE-2019-15211?
CVE-2019-15211 affects Linux kernel versions prior to 5.2.6.
What types of systems are impacted by CVE-2019-15211?
CVE-2019-15211 impacts various Linux distributions including Debian, Ubuntu, and openSUSE.
What is the root cause of CVE-2019-15211?
CVE-2019-15211 is caused by a use-after-free vulnerability in the Linux kernel related to incorrect memory allocation by the USB drivers.