An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver.
CVE-2019-15291
CVSS base score
4.6 (v3.0)
Severity
MEDIUM
Attack vector
Physical
Weakness
CWE-476
Last modified
November 2, 2026
CVSS vector
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
linux linux kernel
References
- lists.opensuse.org
- lists.opensuse.org
- packetstormsecurity.com
- www.openwall.com Mailing List, Third Party Advisory
- www.openwall.com Mailing List, Third Party Advisory
- lists.debian.org
- lists.debian.org
- seclists.org
- security.netapp.com
- syzkaller.appspot.com Exploit, Third Party Advisory