PT-2019-4692 · Linux+6 · Linux Kernel+6
Jungyeon
·
Publicado
2019-04-09
·
Atualizado
2025-09-29
·
CVE-2019-19319
CVSS v2.0
6.8
Média
| Vetor | AV:L/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.2
Description
The issue is related to a use-after-free in the
ext4 xattr set entry function in fs/ext4/xattr.c, which can cause a slab-out-of-bounds write access. This can occur when a large old size value is used in a memset call after mounting a crafted ext4 image. The exploitation of this issue may allow a remote attacker to execute arbitrary code.Recommendations
For Linux kernel versions prior to 5.2, update to version 5.2 or later to resolve the issue.
At the moment, there is no information about additional mitigation measures for this vulnerability.
Exploit
Correção
Memory Corruption
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu