CVE-2019-19318

Published: Nov 28, 2019Modified: Jun 17, 2026

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags returns an already freed pointer,

Affected (17)

Products: Linux: Linux Kernel · Opensuse: Leap · Canonical: Ubuntu Linux · +2 more

Show all products

Linux: Linux Kernel · Opensuse: Leap · Canonical: Ubuntu Linux · Debian: Debian Linux · Netapp: Active Iq Unified Manager, Data Availability Services, Hci Management Node, Solidfire, Steelstore Cloud Integrated Storage, Aff A700s Firmware, Fas8300 Firmware, Fas8700 Firmware, Aff A400 Firmware, H610s Firmware

1 product

1 product

1 product

1 product

10 products

Active Iq Unified Manager

Data Availability Services

Hci Management Node

Solidfire

Steelstore Cloud Integrated Storage

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 5.0.21
Linux Linux Kernel	Version 5.3.11

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 15.1

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 9.0

Configuration E

5 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	From 9.5
Netapp Data Availability Services	All versions
Netapp Hci Management Node	All versions
Netapp Solidfire	All versions
Netapp Steelstore Cloud Integrated Storage	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Aff A700s Firmware	All versions

Running on/with	Platform Versions
Netapp Aff A700s	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Fas8300 Firmware	All versions

Running on/with	Platform Versions
Netapp Fas8300	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Fas8700 Firmware	All versions

Running on/with	Platform Versions
Netapp Fas8700	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Aff A400 Firmware	All versions

Running on/with	Platform Versions
Netapp Aff A400	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H610s Firmware	All versions

Running on/with	Platform Versions
Netapp H610s	All versions

Related CWEs

CWE-416

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (10)

http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19318

Source: cve@mitre.org

ExploitThird Party Advisory

https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://security.netapp.com/advisory/ntap-20200103-0001/

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/4414-1/

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html