CVE-2019-18885

PoC —

CVSS 3.1

5.5 medium

EPSS

1%p67

Published

Nov 14, 2019 (Nov 14, 2019)

Modified

Jun 17, 2026

Description

fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices->devices is mishandled within find_device, aka CID-09ba3bc9dd15.

Vendors: linux
Products: linux kernel
Weakness: CWE-476
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.