CVE-2019-19537: Linux Kernel

Medium severity, CVSS 4.2. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer, aka CID-303911cfc5b9. This affects drivers/usb/core/file.c.

Affected products

• Linux Linux Kernel: before 5.2.10 (fixed in 5.2.10)

Published 2019-12-03. Last modified 2026-06-17.