CVE-2019-15220

A vulnerability was found in the Linux kernel in versions prior to 5.2.1. The Prism54 USB device driver is susceptible to malicious USB devices. An attacker able to add or remove USB devices could cause a memory corruption or crash leading to a denial of service. Availability is the highest threat to the system.

Mitigation

To mitigate this issue (for rhel5), prevent modules p54pci, prism54 from being loaded. Please see <https://access.redhat.com/solutions/41278&gt; for how to blacklist a kernel module to prevent it from loading automatically.