An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/driver.c driver.
Created kernel tracking bugs for this issue:
Affects: fedora-all [bug 1749987]
This was fixed for Fedora with the 5.1.8 stable kernel updates.
This issue is rated as having Low impact because of the physical access needed to trigger this issue.
To mitigate this issue, prevent module snd-usb-line6 from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.