CVE-2019-19527
published 2019-12-03CVE-2019-19527: In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka…
PriorityP427medium6.8CVSS 3.1
AVPACLPRNUINSUCHIHAH
EPSS
0.45%
36.7th percentile
In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | linux | < linux 5.2.17-1 (bookworm) | linux 5.2.17-1 (bookworm) |
| android | — | — | |
| linux | linux_kernel | >= 0 < 5.2.17-1 | 5.2.17-1 |
| linux | linux_kernel | >= 0 < 5.2.17-1 | 5.2.17-1 |
| linux | linux_kernel | >= 0 < 5.2.17-1 | 5.2.17-1 |
| linux | linux_kernel | >= 0 < 5.2.17-1 | 5.2.17-1 |
| linux | linux_kernel | >= 2.6.30 < 3.16.79 | 3.16.79 |
| linux | linux_kernel | >= 3.17 < 4.4.190 | 4.4.190 |
| linux | linux_kernel | >= 4.10 < 4.14.140 | 4.14.140 |
| linux | linux_kernel | >= 4.15 < 4.19.68 | 4.19.68 |
| linux | linux_kernel | >= 4.20 < 5.2.10 | 5.2.10 |
| linux | linux_kernel | >= 4.5 < 4.9.190 | 4.9.190 |
| opensuse | leap | — | — |
CVSS provenance
nvdv3.16.8MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
osv6.8MEDIUM
vendor_debian6.8MEDIUM
vendor_redhat6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2019-19527: USB
vendor_android·2020-03-01·CVSS 6.8
CVE-2019-19527 [MEDIUM] CVE-2019-19527: USB
Android Security Bulletin 2020-03-01
CVE: CVE-2019-19527
Severity: HIGH
Type: EoP
Component: USB
References: A-146257915
Upstream kernel [2]
Red Hat
kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver
vendor_redhat·2019-08-06·CVSS 6.8
CVE-2019-19527 [MEDIUM] CWE-416 kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver
kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver
In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e.
A vulnerability was found in hiddev_open in drivers/hid/usbhid/hiddev.c in the USB Human Interface Device class subsystem, where an existing device must be validated prior to its access. The device should also ensure the hiddev_list cleanup occurs at failure, as this may lead to a use-after-free problem, or possibly escalate privileges to an unauthorized user.
Statement: This issue is rated as Moderate because of the need of physical access to the system.
Mitigation: Mitigation for this issue is either not available o
Debian
CVE-2019-19527: linux - In the Linux kernel before 5.2.10, there is a use-after-free bug that can be cau...
vendor_debian·2019·CVSS 6.8
CVE-2019-19527 [MEDIUM] CVE-2019-19527: linux - In the Linux kernel before 5.2.10, there is a use-after-free bug that can be cau...
In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e.
Scope: local
bookworm: resolved (fixed in 5.2.17-1)
bullseye: resolved (fixed in 5.2.17-1)
forky: resolved (fixed in 5.2.17-1)
sid: resolved (fixed in 5.2.17-1)
trixie: resolved (fixed in 5.2.17-1)
GHSA
GHSA-fw8r-j75g-9f4r: In the Linux kernel before 5
ghsa_unreviewed·2022-05-24
CVE-2019-19527 [MEDIUM] CWE-416 GHSA-fw8r-j75g-9f4r: In the Linux kernel before 5
In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e.
OSV
CVE-2019-19527: In the Linux kernel before 5
osv·2019-12-03·CVSS 6.8
CVE-2019-19527 [MEDIUM] CVE-2019-19527: In the Linux kernel before 5
In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2019-19527 kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver
bugzilla·2019-12-13·CVSS 6.8
CVE-2019-19527 [MEDIUM] CVE-2019-19527 kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver
CVE-2019-19527 kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver
A vulnerability was found in hiddev_open in drivers/hid/usbhid/hiddev.c in USB human interface device class subsystem, in this problem if a USB device fails to initialize correctly list management code in the error handling path can delete a list entry while other USB code paths could be using it. This may lead to a use-after-free situation which is frequently used by attackers to corrupt memory, panic the system or possibly escalate privileges.
Upstream Patch:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6d4472d7bec39917b54e4e80245784ea5d60ce49
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9c09b214f30e3c11f9b0b
Bugzilla
CVE-2019-19527 kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver [fedora-all]
bugzilla·2019-12-13·CVSS 6.8
CVE-2019-19527 [MEDIUM] CVE-2019-19527 kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver [fedora-all]
CVE-2019-19527 kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.htmlhttp://www.openwall.com/lists/oss-security/2019/12/03/4https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.10https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6d4472d7bec39917b54e4e80245784ea5d60ce49https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9c09b214f30e3c11f9b0b03f89442df03643794dhttps://lists.debian.org/debian-lts-announce/2020/01/msg00013.htmlhttps://lists.debian.org/debian-lts-announce/2020/03/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.htmlhttp://www.openwall.com/lists/oss-security/2019/12/03/4https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.10https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6d4472d7bec39917b54e4e80245784ea5d60ce49https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9c09b214f30e3c11f9b0b03f89442df03643794dhttps://lists.debian.org/debian-lts-announce/2020/01/msg00013.htmlhttps://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
2019-12-03
Published