ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2019-19448

PoC —
CVSS 3.1
7.8 high
EPSS
2%p81
Published
()
Modified
Description

In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.

Vendors
linuxdebiancanonicalnetapp
Products
linux kernel, debian linux, ubuntu linux, active iq unified manager, cloud backup, data availability services, hci management node, solidfire, steelstore cloud integrated storage, a700s firmware, fas 8300 firmware, fas 8700 firmware
Weakness
CWE-416
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news

No ingested article mentions this CVE yet.