Search/CVE-2019-19448
● CVE — High

CVE-2019-19448

Vendordebian, linux, netapp, canonicalProductdebian linux, linux kernel, h610s firmware, ubuntu linux, active iq unified manager, cloud backup, steelstore cloud integrated storage, solidfire, hci management node, a700s firmware, data availability services, solidfire baseboard management controller firmware, aff a400 firmware, aff 8300 firmware, aff 8700 firmware, fas 8300 firmware, fas 8700 firmware, fas a400 firmwareDiscoveredDec 8, 2019UpdatedNov 21, 2024

In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.

CVSS v3.1
7.8 HIGH
EPSS
2.14%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Timeline
disclosure → media coverage
Dec 8, 2019
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024