CVE-2019-15215: Use After Free
An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2usb.c driver.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2 - Upgrade
Upgrade
Linux kernel (drivers/media/usb/cpia2/cpia2_usb.c)to a version that resolves this vulnerability.Fixed in 5.2.6
Event History
Frequently Asked Questions
What is the severity of CVE-2019-15215?
CVE-2019-15215 is considered a high severity vulnerability due to its potential to be exploited by malicious USB devices.
How do I fix CVE-2019-15215?
To fix CVE-2019-15215, upgrade to a Linux kernel version of 5.2.6 or later.
Which Linux kernel versions are affected by CVE-2019-15215?
CVE-2019-15215 affects Linux kernel versions prior to 5.2.6.
What types of devices are implicated in CVE-2019-15215?
CVE-2019-15215 is associated with vulnerabilities that can be exploited by malicious USB devices.
Is the CVE-2019-15215 vulnerability present in Ubuntu 16.04?
Yes, CVE-2019-15215 affects Ubuntu 16.04 if it is running a kernel version lower than 5.2.6.