CVE-2019-19532: In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malic...

Security readout for executives and security teams

A malicious USB device could trigger memory corruption in several Linux kernel HID drivers before version 5.3.9. This is mainly a physical or USB-pass-through risk, not a remote internet-facing flaw based on the provided sources. Exposure is most likely on Linux systems running vulnerable kernels that accept untrusted USB peripherals. Workstations, kiosks, labs, shared terminals, and virtualized environments with USB passthrough deserve attention. Headless servers without physical USB access are less likely to be exposed. Prioritize patching exposed Linux workstations and shared systems where USB devices can be attached. Treat this as a meaningful local-access risk, not an internet-wide emergency, because active exploitation is not supported by the provided evidence. Mitigation focus: Apply vendor kernel security updates for affected Linux distributions.; Upgrade upstream kernels to a version containing the d9d4b1e46d95 fix.; Restrict use of untrusted USB peripherals on Linux endpoints..

Prepared

Jun 6, 2026, 03:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.