CVE-2019-3819

Name of the Vulnerable Software and Affected Versions Linux kernel versions v4.18 and newer

Description A flaw was found in the Linux kernel in the function hid debug events read() in the drivers/hid/hid-debug.c file, which may enter an infinite loop with certain parameters passed from a userspace. This could allow a local privileged user (with "root" privileges) to cause a system lock up and a denial of service. The issue is related to uncontrolled resource consumption.

Recommendations For Linux kernel versions v4.18 and newer, consider disabling the hid debug events read() function as a temporary workaround to minimize the risk of exploitation until a patch is available. Restrict access to the drivers/hid/hid-debug.c file to prevent potential abuse.