Published: 14/11/2019 Updated: 14/06/2021

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P

fs/btrfs/volumes.c in the Linux kernel prior to 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices->devices is mishandled within find_device, aka CID-09ba3bc9dd15.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Debian Bug report logs - #962254 NFSv42: umask not applied on filesystem without ACL support Package: src:linux; Maintainer for src:linux is Debian Kernel Team <debian-kernel@listsdebianorg>; Reported by: Elliott Mitchell <ehem+debian@m5pcom> Date: Fri, 5 Jun 2020 05:42:01 UTC Severity: grave Tags: security, ups ...

Several security issues were fixed in the Linux kernel ...

CVE-2019-18885 CVE-2019-18885 bobfuzzer Team Members Infomations Overview Target Reproduce Bug Causes Debugger View KASAN Logs Acknowledgments bobfuzzer project team in BoB(aka Best of the Best), Republic of Korea (bobfuzzer@gmailcom) finding bugs in linux kernel filesystem modules Team Members Project Member: 김동희(Kieast), 조형진(zkaryaJo), 홍승표

CWE-476 https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=09ba3bc9dd150457c506e4661380a6183af651c1 https://github.com/bobfuzzer/CVE-2019-18885 https://github.com/torvalds/linux/commit/09ba3bc9dd150457c506e4661380a6183af651c1 https://security.netapp.com/advisory/ntap-20191205-0001/https://usn.ubuntu.com/4254-1/https://usn.ubuntu.com/4254-2/http://packetstormsecurity.com/files/156185/Kernel-Live-Patch-Security-Notice-LSN-0062-1.html https://usn.ubuntu.com/4258-1/https://usn.ubuntu.com/4287-1/https://usn.ubuntu.com/4287-2/https://lists.debian.org/debian-lts-announce/2020/08/msg00019.html https://www.oracle.com/security-alerts/cpuApr2021.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=962254 https://nvd.nist.gov https://usn.ubuntu.com/4287-2/

CVE-2019-18885

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect