CVE-2019-19537: In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB devi...

Security readout for executives and security teams

This is a Linux kernel USB flaw fixed upstream in Linux 5.2.10. A malicious USB device could trigger a race condition in the USB character device layer. Business urgency is highest for systems where untrusted people can attach USB devices, including kiosks, shared workstations, labs, and exposed servers. Exposure is primarily Linux systems running affected or unpatched backported kernels where an attacker can introduce a malicious USB device. Internet-only exposure is not supported by the provided sources. Treat this as a targeted physical-access risk, not a broad remote emergency. Prioritize patching shared endpoints, kiosks, labs, and servers with accessible USB ports. Mitigation focus: Update to Linux kernel 5.2.10 or a vendor kernel containing the fix.; Apply relevant Debian, openSUSE, or other distribution security kernel updates.; Restrict physical access to USB ports on sensitive systems..

Prepared

Jun 6, 2026, 03:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.