Search/CVE-2019-15538
● CVE — High

CVE-2019-15538

Vendordebian, fedoraproject, linux, netapp, canonicalProductdebian linux, fedora, linux kernel, h300e firmware, h300s firmware, h410c firmware, h410s firmware, h500e firmware, h500s firmware, h610s firmware, h700e firmware, h700s firmware, ubuntu linux, leap, solidfire, hci management node, aff a700s firmware, data availability servicesDiscoveredAug 25, 2019UpdatedNov 21, 2024

An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfs_setattr_nonsize is failing to unlock the ILOCK after the xfs_qm_vop_chown_reserve call fails. This is primarily a local DoS attack vector, but it might result as well in remote DoS if the XFS filesystem is exported for instance via NFS.

CVSS v3.1
7.5 HIGH
EPSS
3.92%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Timeline
disclosure → media coverage
Aug 25, 2019
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024