In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusb_fd.c driver, aka CID-30a8beeb3042.
[
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@30a8beeb3042f49d0537b7050fd21b490166a3d9",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "270391548148787681875044995437466313028",
                "6874278702555293828941908515704519076",
                "39626491216772814180616575029950530879",
                "282007522086534540172739212986109857471"
            ]
        },
        "target": {
            "file": "drivers/net/can/usb/peak_usb/pcan_usb_fd.c"
        },
        "id": "CVE-2019-19535-11e40839",
        "deprecated": false,
        "signature_type": "Line"
    }
]