In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusb_core.c driver, aka CID-f7a1337f0d29.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-19534.json"
[
{
"id": "CVE-2019-19534-6d3b93c4",
"target": {
"file": "drivers/net/can/usb/peak_usb/pcan_usb_core.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@f7a1337f0d29b98733c8824e165fca3371d7d4fd",
"digest": {
"threshold": 0.9,
"line_hashes": [
"123787316372699279875724053916983512311",
"291624371161630103196835449700815826801",
"65219066472892368256557203556815331995",
"201202374982363963094186489507459994324"
]
},
"signature_type": "Line"
}
]