CVE-2019-15917: Use After Free
A flaw was found in the Linux kernel's implementation of the HCI UART driver. A local attacker with access permissions to the Bluetooth device can issue an ioctl, which triggers the hciuartsetproto() function in drivers/bluetooth/hcildisc.c. The flaw in this function can cause memory corruption or a denial of service because of a use-after-free issue when the hciuartregisterdev() fails.
Other sources
An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hciuartregisterdev() fails in hciuartsetproto() in drivers/bluetooth/hcildisc.c.
Affected Software
Remediation
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2019-15917?
CVE-2019-15917 has a medium severity rating due to the potential risk of a use-after-free vulnerability in the Linux kernel.
How do I fix CVE-2019-15917?
To fix CVE-2019-15917, update your Linux kernel to version 5.0.5 or later or apply patches provided by your distribution.
Which versions of Linux are affected by CVE-2019-15917?
CVE-2019-15917 affects Linux kernel versions before 5.0.5, including various versions of kernels across multiple distributions.
What causes the CVE-2019-15917 vulnerability?
CVE-2019-15917 is caused by a use-after-free error occurring when the hci_uart_register_dev() function fails within the Bluetooth driver.
Can I identify if I am vulnerable to CVE-2019-15917?
You can identify if you are vulnerable to CVE-2019-15917 by checking your kernel version and verifying if it is earlier than 5.0.5.