### [CVE-2019-15217](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15217) ![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen) ### Description An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver. ### POC #### Reference - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.3 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.3 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5d2e73a5f80a5b5aff3caf1ec6d39b5b3f54b26e - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5d2e73a5f80a5b5aff3caf1ec6d39b5b3f54b26e #### Github - https://github.com/ARPSyndicate/cvemon - https://github.com/MrAgrippa/nes-01