CVE-2019-15504: Double Free
drivers/net/wireless/rsi/rsi91xusb.c in the Linux kernel through 5.2 ...
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Upgrade
Upgrade
ubuntu/linux-azureto a version that resolves this vulnerability.Fixed in 5.0.0-1023.24~18.04.1 - Upgrade
Upgrade
ubuntu/linux-gcpto a version that resolves this vulnerability.Fixed in 5.0.0-1021.21~18.04.1 - Upgrade
Upgrade
ubuntu/linux-gke-5.0to a version that resolves this vulnerability.Fixed in 5.0.0-1023.23~18.04.2 - Upgrade
Upgrade
ubuntu/linux-hweto a version that resolves this vulnerability.Fixed in 5.0.0-32.34~18.04.2 - Upgrade
Upgrade
ubuntu/linux-oem-osp1to a version that resolves this vulnerability.Fixed in 5.0.0-1025.28
Event History
Frequently Asked Questions
What is CVE-2019-15504?
CVE-2019-15504 is a vulnerability in the Linux kernel that allows for a double free via crafted USB device traffic.
How severe is CVE-2019-15504?
CVE-2019-15504 is a serious vulnerability with a CVSS severity score of X.X.
Which software versions are affected by CVE-2019-15504?
CVE-2019-15504 affects the Linux kernel versions up to and including 5.2.9.
How can I fix CVE-2019-15504?
To fix CVE-2019-15504, it is recommended to update your Linux kernel to version 5.3 or later.
Where can I find more information about CVE-2019-15504?
You can find more information about CVE-2019-15504 at the following references: [Reference 1](https://lore.kernel.org/lkml/20190819220230.10597-1-benquike@gmail.com/), [Reference 2](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T4JZ6AEUKFWBHQAROGMQARJ274PQP2QP/), [Reference 3](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O3RUDQJXRJQVGHCGR4YZWTQ3ECBI7TXH/)