CVE-2019-15504: Canonical Ubuntu Linux

Critical severity, CVSS 9.8. EPSS: 4.3% chance of exploitation in the next 30 days.

drivers/net/wireless/rsi/rsi_91x_usb.c in the Linux kernel through 5.2.9 has a Double Free via crafted USB device traffic (which may be remote via usbip or usbredir).

Affected products

• Canonical Ubuntu Linux: version 18.04 only; version 19.04 only
• Linux Linux Kernel: from 4.17, before 4.19.74 (fixed in 4.19.74); from 4.20, before 5.2.16 (fixed in 5.2.16)

Published 2019-08-23. Last modified 2026-06-17.