HOME VULNERABILITIESCVE-2019-15098

MEDIUM

CVE-2019-15098

CWE-476Published: August 16, 2019· Updated: Jun 17, 2026

4.6

CVSS v3.1

Official Description

drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.

Technical Analysis

CVE-2019-15098 requires local access, meaning attackers must already have a foothold on the target system.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 4.6.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorPhysical

Attack ComplexityLow

Privileges Req.None

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityNone

IntegrityNone

AvailabilityHigh

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Vendors & Products

Canonical1 product(s)

ubuntu linux

Debian1 product(s)

debian linux

Linux1 product(s)

linux kernel

netapp4 product(s)

active iq performance analytics servicesactive iq unified managerdata availability serviceselement software

openSUSE1 product(s)

leap

Source: NVD CPE · 12 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

Security advisories & exploits

Official NIST entry

CVE Program entry

External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html

ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html

ADVISORYhttp://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html

ADVISORYhttp://www.openwall.com/lists/oss-security/2019/09/27/1

ADVISORYhttp://www.openwall.com/lists/oss-security/2019/09/27/2

ADVISORYhttp://www.openwall.com/lists/oss-security/2019/09/27/3

ADVISORYhttps://lists.debian.org/debian-lts-announce/2020/01/msg00013.html

ADVISORYhttps://lists.debian.org/debian-lts-announce/2020/03/msg00001.html

ADVISORYhttps://seclists.org/bugtraq/2019/Nov/11

ADVISORYhttps://security.netapp.com/advisory/ntap-20190905-0002/

ADVISORYhttps://support.f5.com/csp/article/K61214359

ADVISORYhttps://usn.ubuntu.com/4184-1/

ADVISORYhttps://usn.ubuntu.com/4185-1/

ADVISORYhttps://usn.ubuntu.com/4186-1/

ADVISORYhttps://usn.ubuntu.com/4186-2/

ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html

ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html

ADVISORYhttp://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html

ADVISORYhttp://www.openwall.com/lists/oss-security/2019/09/27/1

ADVISORYhttp://www.openwall.com/lists/oss-security/2019/09/27/2

ADVISORYhttp://www.openwall.com/lists/oss-security/2019/09/27/3

ADVISORYhttps://lists.debian.org/debian-lts-announce/2020/01/msg00013.html

ADVISORYhttps://lists.debian.org/debian-lts-announce/2020/03/msg00001.html

ADVISORYhttps://seclists.org/bugtraq/2019/Nov/11

ADVISORYhttps://security.netapp.com/advisory/ntap-20190905-0002/

ADVISORYhttps://support.f5.com/csp/article/K61214359

ADVISORYhttps://usn.ubuntu.com/4184-1/

ADVISORYhttps://usn.ubuntu.com/4185-1/

ADVISORYhttps://usn.ubuntu.com/4186-1/

ADVISORYhttps://usn.ubuntu.com/4186-2/

All References (34)

→

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.htmlMailing List · Third Party Advisory

→

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.htmlMailing List · Third Party Advisory

→

http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.htmlThird Party Advisory · VDB Entry

→

http://www.openwall.com/lists/oss-security/2019/09/27/1Mailing List · Third Party Advisory

→

http://www.openwall.com/lists/oss-security/2019/09/27/2Mailing List · Third Party Advisory

→

http://www.openwall.com/lists/oss-security/2019/09/27/3Mailing List · Third Party Advisory

→

https://lists.debian.org/debian-lts-announce/2020/01/msg00013.htmlMailing List · Third Party Advisory

→

https://lists.debian.org/debian-lts-announce/2020/03/msg00001.htmlMailing List · Third Party Advisory

→

https://lore.kernel.org/linux-wireless/20190804002905.11292-1-benquike%40gmail.com/T/#u

→

https://seclists.org/bugtraq/2019/Nov/11Broken Link · Mailing List · Third Party Advisory

→

https://security.netapp.com/advisory/ntap-20190905-0002/Third Party Advisory

→

https://support.f5.com/csp/article/K61214359Third Party Advisory

→

https://support.f5.com/csp/article/K61214359?utm_source=f5support&amp%3Butm_medium=RSS

→

https://usn.ubuntu.com/4184-1/Third Party Advisory

→

https://usn.ubuntu.com/4185-1/Third Party Advisory

Quick Facts

CVE IDCVE-2019-15098

CVSS Score4.6 / 10

SeverityMEDIUM

WeaknessCWE-476

CISA KEVNo

Affected5 vendor(s)

PublishedAug 16, 2019

Related CVEs (CWE-476)

Recommended Actions

→Apply vendor patches immediately
→Monitor CVE-2019-15098 in threat intel feeds
→Review IDS/IPS signatures for exploitation attempts

Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWatch. CVE data is provided under the NVD usage policy.

← All Vulnerabilities·Search for CVE-2019-15098·NVD