cbcvebase.
CVE-2019-19534
published 2019-12-03

CVE-2019-19534: In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c…

PriorityP47low2.4CVSS 3.1
AVPACLPRNUINSUCLINAN
EPSS
0.51%
40.8th percentile
In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver, aka CID-f7a1337f0d29.

Affected

14 ranges
VendorProductVersion rangeFixed in
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
debiandebian_linux
debianlinux< linux 5.3.15-1 (bookworm)linux 5.3.15-1 (bookworm)
linuxlinux_kernel< 5.3.115.3.11
linuxlinux_kernel>= 0 < 5.3.15-15.3.15-1
linuxlinux_kernel>= 0 < 5.3.15-15.3.15-1
linuxlinux_kernel>= 0 < 5.3.15-15.3.15-1
linuxlinux_kernel>= 0 < 5.3.15-15.3.15-1
linuxlinux_kernel>= 0 < 4.4.0-171.2004.4.0-171.200
linuxlinux_kernel>= 0 < 4.15.0-74.844.15.0-74.84

CVSS provenance

nvdv3.12.4LOWCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
osv9.8CRITICAL
vendor_ubuntu9.8CRITICAL
vendor_debian2.4LOW
vendor_redhat2.4LOW
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.