high7.8

CVE-2019-19448

In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to …

Impact

In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.

Affected products

Vendor	Product	Affected versions
Linux	Linux Kernel	from 2.6.31 before 4.4.233 from 4.5.0 before 4.9.233 from 4.10 before 4.14.194 from 4.15 before 4.19.141 from 4.20 before 5.4.60 from 5.5.0 before 5.7.17
Debian	Debian Linux	Version 9.0
Canonical	Ubuntu Linux	Versions 14.04, 16.04, 18.04
Netapp	Active Iq Unified Manager	All versions
Netapp	Cloud Backup	All versions
Netapp	Data Availability Services	All versions
Netapp	Hci Management Node	All versions
Netapp	Solidfire	All versions
Netapp	Steelstore Cloud Integrated Storage	All versions
Netapp	A700s Firmware	All versions
Netapp	Fas 8300 Firmware	All versions
Netapp	Fas 8700 Firmware	All versions

Weakness classification

CWE-416

Impact

Affected products

Weakness classification

References