Tracker / CVE-2019-19448
CVE-2019-19448
High 7.8
In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.
Affected products and versions
| canonical | ubuntu_linux |
|---|---|
| debian | debian_linux |
| linux | linux_kernel · 2.6.31 → 4.4.233 |
| linux | linux_kernel · 4.10 → 4.14.194 |
| linux | linux_kernel · 4.15 → 4.19.141 |
| linux | linux_kernel · 4.20 → 5.4.60 |
| linux | linux_kernel · 4.5.0 → 4.9.233 |
| linux | linux_kernel · 5.5.0 → 5.7.17 |
| linux | linux_kernel · 5.8 → 5.8.3 |
| netapp | a700s_firmware |
| netapp | active_iq_unified_manager |
| netapp | aff_8300_firmware |
| netapp | aff_8700_firmware |
| netapp | aff_a400_firmware |
| netapp | cloud_backup |
| netapp | data_availability_services |
| netapp | fas_8300_firmware |
| netapp | fas_8700_firmware |
| netapp | fas_a400_firmware |
| netapp | h610s_firmware |
| netapp | hci_management_node |
| netapp | solidfire |
| netapp | solidfire_baseboard_management_controller_firmware |
| netapp | steelstore_cloud_integrated_storage |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.