CVE-2019-3819: Medium severity Linux Linux kernel vulnerability
A flaw was found in the Linux kernel in the function hiddebugeventsread() in drivers/hid/hid-debug.c file which may enter an infinite loop with certain parameters passed from a userspace. A local privileged user ("root") can cause a system lock up and a denial of service. Versions from v4.18 and newer are vulnerable.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2
Event History
Frequently Asked Questions
What is the severity of CVE-2019-3819?
CVE-2019-3819 has been assessed with a severity level that can lead to denial of service due to a potential infinite loop in the Linux kernel.
How do I fix CVE-2019-3819?
To fix CVE-2019-3819, update to a fixed version of the Linux kernel, such as 5.10.223-1 or newer.
Which versions of the Linux kernel are affected by CVE-2019-3819?
CVE-2019-3819 affects Linux kernel versions starting from 4.18.
Can a remote user exploit CVE-2019-3819?
No, CVE-2019-3819 can only be exploited by a local privileged user with root access.
What are the potential consequences of CVE-2019-3819?
The potential consequences of CVE-2019-3819 include system lock-ups and denial of service.