CVE-2019-15212: Double Free
An issue was discovered in the Linux kernel before 5.1.8. There is a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 5.1.8
Event History
Frequently Asked Questions
What is the severity of CVE-2019-15212?
CVE-2019-15212 has a high severity rating due to the potential exploitation via a malicious USB device, leading to a double-free vulnerability.
How do I fix CVE-2019-15212?
To fix CVE-2019-15212, upgrade to the Linux kernel version 5.1.8 or later.
What systems are affected by CVE-2019-15212?
CVE-2019-15212 affects Linux kernel versions prior to 5.1.8, as well as various firmware provided by NetApp.
What does CVE-2019-15212 exploit?
CVE-2019-15212 exploits a vulnerability in the rio500 USB driver within the Linux kernel.
Who is affected by CVE-2019-15212?
Users and systems running affected versions of the Linux kernel or specific NetApp firmware are at risk due to CVE-2019-15212.