CVEvulnerability

CVE-2019-19813

5.5 MEDIUM Published 2019-12-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-12-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
CWE-416

Description

In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in __mutex_lock in kernel/locking/mutex.c. This is related to mutex_can_spin_on_owner in kernel/locking/mutex.c, __btrfs_qgroup_free_meta in fs/btrfs/qgroup.c, and btrfs_insert_delayed_items in fs/btrfs/delayed-inode.c.

Affected configurations

• linux linux kernel 5.0.21 • canonical ubuntu linux 14.04 • canonical ubuntu linux 16.04 • canonical ubuntu linux 18.04 • debian debian linux 9.0 • netapp active iq unified manager (>= 9.5) • netapp data availability services • netapp hci management node • netapp solidfire • netapp steelstore cloud integrated storage • netapp aff a700s firmware • netapp fas8300 firmware • netapp fas8700 firmware • netapp aff a400 firmware • netapp h610s firmware

Related

Weakness · CWE (1)

References