PT-2019-4696 · Linux+3 · Linux Kernel+3
Publicado
2019-06-21
·
Atualizado
2025-09-29
·
CVE-2019-19318
CVSS v2.0
4.9
Média
| Vetor | AV:L/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel version 5.3.11
Description
The issue is related to a use-after-free in the
rwsem down write slowpath function, specifically in the rwsem can spin on owner function within kernel/locking/rwsem.c. This occurs when mounting a crafted btrfs image twice, causing rwsem owner flags to return an already freed pointer. The exploitation of this issue may allow an attacker to cause a denial of service.Recommendations
For Linux kernel version 5.3.11, consider applying a patch that fixes the use-after-free issue in the
rwsem down write slowpath function as a permanent solution. As a temporary workaround, restrict the mounting of crafted btrfs images to minimize the risk of exploitation.Exploit
Correção
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Linux Kernel
Suse
Ubuntu