CVE-2019-15220

A vulnerability was found in the Linux kernel in versions prior to 5.2.1. The Prism54 USB device driver is susceptible to malicious USB devices. An attacker able to add or remove USB devices could cause a memory corruption or crash leading to a denial of service. Availability is the highest threat to the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue (for rhel5), prevent modules p54pci, prism54 from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.