Name: CVE-2019-19536: Missing Initialization of Resource
Creator: Rapid7
Published: 2019-12-03T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2019-19536, CWE-909, CVSS 4.6, EPSS 0.00375

In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver, aka CID-ead16e53c2f0.

CVSS Details

CVSS 3.1 Base Score: 4.6
CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade linux	Jan 20, 2020	Dec 3, 2019
Huawei Euleros 2_0_sp2	—	Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-develUpgrade perfUpgrade kernel-debug-devel	Jun 17, 2020	Dec 3, 2019
Huawei Euleros 2_0_sp3	—	Upgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf	Apr 16, 2020	Dec 3, 2019
Huawei Euleros 2_0_sp5	—	Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-headers	Feb 24, 2020	Dec 3, 2019
Huawei Euleros 2_0_sp8	—	Upgrade kernel-headersUpgrade python3-perfUpgrade kernel-develUpgrade kernelUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-sourceUpgrade kernel-toolsUpgrade bpftool	Jan 3, 2020	Dec 3, 2019
Oracle_linux	—	Upgrade kernel-uek	Jul 9, 2020	Aug 2, 2019
Redhat_linux	—	No solution exists	Jul 9, 2025	Dec 3, 2019
Suse	—	Upgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-docs	Dec 13, 2019	Dec 3, 2019
Ubuntu	—	Upgrade linux-kvmUpgrade linux-fipsUpgrade linux-snapdragonUpgrade linux-azure-fipsUpgrade linux-gcpUpgrade linux-oracleUpgrade linux-raspi2Upgrade linux-aws-hweUpgrade linux-awsUpgrade linux-gke-4.15Upgrade linux-azureUpgrade linux-gke-5.0Upgrade linux-hweUpgrade linux-aws-fipsUpgrade linux-oemUpgrade linux-oem-osp1Upgrade linux-lts-xenialUpgrade linux	Nov 19, 2024	Dec 3, 2019

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence