CVE-2019-15213

Note

Setting priority to low since this issue requires a malicious USB
device to be inserted into the system
Ben Hutchings noticed that commit 6cf97230cd5f ("media: dvb: usb: fix
use after free in dvb_usb_device_exit"), which is mentioned in the CVE
references for this issue, likely doesn't fix the problem. See the lore
reference above for details. I think Ben is correct and have adjusted our
break-fix metadata to use the break commit that he pointed out.

Parameter	Value
Base score	4.6
Attack vector	Physical
Attack complexity	Low
Privileges required	None
User interaction	None
Scope	Unchanged
Confidentiality	None
Integrity impact	None
Availability impact	High
Vector	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2019-15213

Notes

Priority

Cvss 3 Severity Score

Status

Severity score breakdown

References

Bugs

Join the discussion

Canonical is offering Expanded Security Maintenance

Further reading

Package	Release	Status
linux Launchpad, Ubuntu, Debian	bionic	Deferred (2022-01-28)
	disco	Ignored (end of life)
	eoan	Ignored (end of life)
	focal	Deferred (2022-01-28)
	groovy	Ignored (end of life)
	hirsute	Ignored (end of life)
	impish	Ignored (end of life)
	jammy	Deferred (2022-01-28)
	kinetic	Ignored (end of life, was deferred [2022-01-28])
	lunar	Ignored (end of life, was deferred [2022-01-28])
	mantic	Deferred (2022-01-28)
	trusty	Not vulnerable (3.11.0-12.19)
	upstream	Needed
	xenial	Not vulnerable (4.4.0-2.16)
	Patches: Introduced by 299c7007e93645067e1d2743f4e50156de78c4ff Fixed by -
linux-allwinner Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	kinetic	Ignored (end of life, was deferred)
	lunar	Ignored (end of kernel support, was needs-triage)
	mantic	Does not exist
	trusty	Does not exist
	upstream	Ignored (end of life, was needs-triage)
	xenial	Does not exist
linux-allwinner-5.19 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Ignored (end of kernel support, was needs-triage)
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Ignored (end of life, was needs-triage)
	xenial	Does not exist
linux-aws Launchpad, Ubuntu, Debian	bionic	Deferred (2022-01-28)
	disco	Ignored (end of life)
	eoan	Ignored (end of life)
	focal	Deferred (2022-01-28)
	groovy	Ignored (end of life)
	hirsute	Ignored (end of life)
	impish	Ignored (end of life)