Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.6
CVE-2019-15221: Linux Kernel USB Driver Crashes with Malicious Device
CVE-2019-15221 · published 7 years ago
Summary
A security issue affects the Linux kernel's USB sound driver. If a malicious device is plugged in, it can cause the system to crash. To stay safe, keep your Linux kernel up to date and be cautious when connecting unknown USB devices.
What to do
- Update canonical linux-aws to version 4.4.0-1062.66.
- Update canonical linux-azure to version 4.15.0-1059.64~14.04.1.
- Update canonical linux-lts-xenial to version 4.4.0-174.204~14.04.1.
- Update canonical linux to version 4.4.0-174.204.
- Update canonical linux-aws to version 4.4.0-1102.113.
- Update canonical linux-aws-hwe to version 4.15.0-1047.49~16.04.1.
- Update canonical linux-azure to version 4.15.0-1056.61.
- Update canonical linux-gcp to version 4.15.0-1041.43.
- Update canonical linux-hwe to version 4.15.0-60.67~16.04.1.
- Update canonical linux-kvm to version 4.4.0-1066.73.
- Update canonical linux-oracle to version 4.15.0-1022.25~16.04.1.
- Update canonical linux-raspi2 to version 4.4.0-1129.138.
- Update canonical linux-snapdragon to version 4.4.0-1133.141.
- Update canonical linux-fips to version 4.4.0-1029.34.
- Update canonical linux to version 4.15.0-60.67.
- Update canonical linux-aws to version 4.15.0-1047.49.
- Update canonical linux-azure to version 5.0.0-1022.23~18.04.1.
- Update canonical linux-gcp to version 4.15.0-1042.45.
- Update canonical linux-gke-4.15 to version 4.15.0-1041.43.
- Update canonical linux-gke-5.0 to version 5.0.0-1020.20~18.04.1.
- Update canonical linux-hwe to version 5.0.0-31.33~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1043.43.
- Update canonical linux-oem to version 4.15.0-1056.65.
- Update canonical linux-oem-osp1 to version 5.0.0-1024.27.
- Update canonical linux-oracle to version 4.15.0-1022.25.
- Update canonical linux-raspi2 to version 4.15.0-1044.47.
- Update canonical linux-snapdragon to version 4.15.0-1062.69.
- Update canonical linux-aws-fips to version 4.15.0-2018.18.
- Update canonical linux-azure-fips to version 4.15.0-2006.7.
- Update debian linux to version 5.2.6-1.
- Update linux linux_kernel to version 5.1.17 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws |
< 4.4.0-1062.66 Fix: upgrade to 4.4.0-1062.66
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1059.64~14.04.1 Fix: upgrade to 4.15.0-1059.64~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial |
< 4.4.0-174.204~14.04.1 Fix: upgrade to 4.4.0-174.204~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:16.04:LTS | canonical | linux |
< 4.4.0-174.204 Fix: upgrade to 4.4.0-174.204
|
| Ubuntu:16.04:LTS | canonical | linux-aws |
< 4.4.0-1102.113 Fix: upgrade to 4.4.0-1102.113
|
| Ubuntu:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1047.49~16.04.1 Fix: upgrade to 4.15.0-1047.49~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-azure |
< 4.15.0-1056.61 Fix: upgrade to 4.15.0-1056.61
|
| Ubuntu:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1041.43 Fix: upgrade to 4.15.0-1041.43
|
| Ubuntu:16.04:LTS | canonical | linux-hwe |
< 4.15.0-60.67~16.04.1 Fix: upgrade to 4.15.0-60.67~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-kvm |
< 4.4.0-1066.73 Fix: upgrade to 4.4.0-1066.73
|
| Ubuntu:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1022.25~16.04.1 Fix: upgrade to 4.15.0-1022.25~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-raspi2 |
< 4.4.0-1129.138 Fix: upgrade to 4.4.0-1129.138
|
| Ubuntu:16.04:LTS | canonical | linux-snapdragon |
< 4.4.0-1133.141 Fix: upgrade to 4.4.0-1133.141
|
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips |
< 4.4.0-1029.34 Fix: upgrade to 4.4.0-1029.34
|
| Ubuntu:18.04:LTS | canonical | linux |
< 4.15.0-60.67 Fix: upgrade to 4.15.0-60.67
|
| Ubuntu:18.04:LTS | canonical | linux-aws |
< 4.15.0-1047.49 Fix: upgrade to 4.15.0-1047.49
|
| Ubuntu:18.04:LTS | canonical | linux-azure |
< 5.0.0-1022.23~18.04.1 Fix: upgrade to 5.0.0-1022.23~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gcp |
< 4.15.0-1042.45 Fix: upgrade to 4.15.0-1042.45
|
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 |
< 4.15.0-1041.43 Fix: upgrade to 4.15.0-1041.43
|
| Ubuntu:18.04:LTS | canonical | linux-gke-5.0 |
< 5.0.0-1020.20~18.04.1 Fix: upgrade to 5.0.0-1020.20~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe |
< 5.0.0-31.33~18.04.1 Fix: upgrade to 5.0.0-31.33~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1043.43 Fix: upgrade to 4.15.0-1043.43
|
| Ubuntu:18.04:LTS | canonical | linux-oem |
< 4.15.0-1056.65 Fix: upgrade to 4.15.0-1056.65
|
| Ubuntu:18.04:LTS | canonical | linux-oem-osp1 |
< 5.0.0-1024.27 Fix: upgrade to 5.0.0-1024.27
|
| Ubuntu:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1022.25 Fix: upgrade to 4.15.0-1022.25
|
| Ubuntu:18.04:LTS | canonical | linux-raspi2 |
< 4.15.0-1044.47 Fix: upgrade to 4.15.0-1044.47
|
| Ubuntu:18.04:LTS | canonical | linux-snapdragon |
< 4.15.0-1062.69 Fix: upgrade to 4.15.0-1062.69
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2018.18 Fix: upgrade to 4.15.0-2018.18
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2006.7 Fix: upgrade to 4.15.0-2006.7
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Debian:12 | debian | linux |
< 5.2.6-1 Fix: upgrade to 5.2.6-1
|
| – | linux | linux_kernel |
< 5.1.17 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | netapp | h410c_firmware |
All versions
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:* |
| – | netapp | active_iq_unified_manager |
All versions
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* |
| – | netapp | data_availability_services |
All versions
cpe:2.3:a:netapp:data_availability_services:-:*:*:*:*:*:*:* |
| – | netapp | solidfire_\&_hci_management_node |
All versions
cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:* |
| – | netapp | solidfire_baseboard_management_controller |
All versions
cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-:*:*:*:*:*:*:* |
| – | canonical | ubuntu_linux |
14.04 16.04 18.04 19.04 cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* |
Showing 50 of 52. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | debian | debian_linux |
8.0 cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* |
| – | opensuse | leap |
15.0 15.1 cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:* |
Original advisory text
An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver.
An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver.
References
- https://ubuntu.com/security/CVE-2019-15221 Third Party Advisory
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.17 Third Party Advisory
- https://ubuntu.com/security/notices/USN-4115-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-4118-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-4147-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-4286-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-4286-2 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2019-15221 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2019-15221 Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html Mailing List Third Party Advisory
- http://www.openwall.com/lists/oss-security/2019/08/20/2 Mailing List Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html Mailing List Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html Mailing List Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html Mailing List Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html Mailing List Third Party Advisory
- https://security.netapp.com/advisory/ntap-20190905-0002/ Third Party Advisory
- https://usn.ubuntu.com/4115-1/ Third Party Advisory
- https://usn.ubuntu.com/4118-1/ Third Party Advisory
- https://usn.ubuntu.com/4147-1/ Third Party Advisory
- https://usn.ubuntu.com/4286-1/ Third Party Advisory
- https://usn.ubuntu.com/4286-2/ Third Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=34... Third Party Advisory
- https://syzkaller.appspot.com/bug?id=240f09164db2c3d3af33a117c713dc7650dc29d6 Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-476NULL Pointer Dereference
Timeline
Published19 Aug 2019
Updated4 Nov 2026
First seen17 Aug 2026
Track software like this
Free during beta