CVE-2019-19377 PUBLISHED

In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c.

EPSS 0.39% · 60.0th percentile

Risk Scores

EPSS Score
0.39%
60.0th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlinux-aws-hwe4.15.0-1074.78~16.04.1, 0, 4.15.0-1030.31~16.04.1
Ubuntu:18.04:LTSlinux-azure-4.154.15.0-1082.92, 4.15.0-1089.99, 4.15.0-1083.93
Ubuntu:Pro:14.04:LTSlinux-aws4.4.0-1029.32, 4.4.0-1129.135, 4.4.0-1128.134
Ubuntu:18.04:LTSlinux4.15.0-36.39, 4.15.0-19.20, 4.15.0-20.21
Ubuntu:Pro:FIPS-updates:18.04:LTSlinux-azure-fips0, 4.15.0-1002.2
Ubuntu:Pro:FIPS-updates:18.04:LTSlinux-aws-fips0, 4.15.0-2000.4, 4.15.0-2018.18
Ubuntu:Pro:14.04:LTSlinux-azure4.15.0-1030.31~14.04.1, 4.15.0-1023.24~14.04.1, 4.15.0-1082.92~14.04.1
Ubuntu:Pro:16.04:LTSlinux4.4.0-273.307, 4.4.0-278.312, 4.4.0-277.311
Ubuntu:20.04:LTSlinux-aws5.3.0-1008.9, 5.3.0-1003.3, 0
Ubuntu:18.04:LTSlinux-oracle-5.30, 5.3.0-1011.12~18.04.1, 5.3.0-1013.14~18.04.1
Ubuntu:16.04:LTSlinux-hwe-edge4.15.0-20.21~16.04.1, 4.15.0-22.24~16.04.1, 4.15.0-23.25~16.04.1
Ubuntu:18.04:LTSlinux-gcp-5.35.3.0-1009.10~18.04.1, 5.3.0-1012.13~18.04.1, 5.3.0-1014.15~18.04.1
Ubuntu:18.04:LTSlinux-azure-5.35.3.0-1018.19~18.04.1, 5.3.0-1016.17~18.04.1, 5.3.0-1013.14~18.04.1
Ubuntu:20.04:LTSlinux-raspi25.3.0-1017.19, 5.3.0-1015.17, 5.3.0-1014.16
Ubuntu:20.04:LTSlinux-azure5.3.0-1009.10, 5.4.0-1010.10, 5.4.0-1006.6
Ubuntu:16.04:LTSlinux-gcp4.15.0-1040.42~16.04.1, 4.15.0-1041.43, 4.15.0-1042.44
Ubuntu:Pro:14.04:LTSlinux3.13.0-165.215, 3.13.0-79.123, 3.13.0-83.127
Ubuntu:18.04:LTSlinux-oem0, 4.15.0-1002.3, 4.15.0-1004.5
Ubuntu:20.04:LTSlinux-azure-fde5.4.0-1069.72+cvm1.1, 5.4.0-1103.109+cvm1.1, 5.4.0-1100.106+cvm1.1
Ubuntu:18.04:LTSlinux-raspi2-5.35.3.0-1023.25~18.04.1, 5.3.0-1022.24~18.04.1, 5.3.0-1021.23~18.04.1

…and 41 more

Timeline

References

Open in Interactive Console →