← Back

CVE-2019-19813

nvd nist
Published: Dec 17, 2019Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in __mutex_lock in kernel/locking/mutex.c. This is related to mutex_can_spin_on_owner in kernel/locking/mutex.c, __btrfs_qgroup_free_meta in fs/btrfs/qgroup.c, and btrfs_insert_delayed_items in fs/btrfs/delayed-inode.c.

Affected (15)

Show all products
Linux: Linux Kernel · Canonical: Ubuntu Linux · Debian: Debian Linux · Netapp: Active Iq Unified Manager, Data Availability Services, Hci Management Node, Solidfire, Steelstore Cloud Integrated Storage, Aff A700s Firmware, Fas8300 Firmware, Fas8700 Firmware, Aff A400 Firmware, H610s Firmware
Linux
1 product
Linux Kernel
Canonical
1 product
Ubuntu Linux
Debian
1 product
Debian Linux
Netapp
10 products
Active Iq Unified Manager
Data Availability Services
Hci Management Node
Solidfire
Steelstore Cloud Integrated Storage
Aff A700s Firmware
Fas8300 Firmware
Fas8700 Firmware
Aff A400 Firmware
H610s Firmware
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Linux Kernel
Version 5.0.21
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 14.04
Ubuntu Linux
Version 16.04
Ubuntu Linux
Version 18.04
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 9.0
Configuration D
5 vulnerable
Vulnerable SoftwareAffected Versions
Active Iq Unified Manager
From 9.5
Data Availability Services
All versions
Hci Management Node
All versions
Solidfire
All versions
Steelstore Cloud Integrated Storage
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Aff A700s Firmware
All versions
Running on/withPlatform Versions
Netapp
Aff A700s
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fas8300 Firmware
All versions
Running on/withPlatform Versions
Netapp
Fas8300
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fas8700 Firmware
All versions
Running on/withPlatform Versions
Netapp
Fas8700
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Aff A400 Firmware
All versions
Running on/withPlatform Versions
Netapp
Aff A400
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H610s Firmware
All versions
Running on/withPlatform Versions
Netapp
H610s
All versions

Related CWEs

CWE-416
Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (10)

Source: cve@mitre.org
ExploitThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.