CVE-2019-15792: Type confusion in shiftfs
In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfsbtrfsioctlfdreplace() calls fdget(oldfd), then without further checks passes the resulting file into shiftfsrealfdget(), which casts file->privatedata, a void that points to a filesystem-dependent type, to a "struct shiftfsfileinfo ". As the privatedata is not required to be a pointer, an attacker can use this to cause a denial of service or possibly execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 7.1.13-1
Event History
Frequently Asked Questions
What is CVE-2019-15792?
CVE-2019-15792 is a vulnerability in the shiftfs module of the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series.
How does CVE-2019-15792 affect Ubuntu?
CVE-2019-15792 affects Ubuntu versions with the Linux kernel 5.0 and 5.3 series.
What is the severity of CVE-2019-15792?
The severity of CVE-2019-15792 is not specified.
How do I fix CVE-2019-15792?
To fix CVE-2019-15792, update your Ubuntu kernel to the fixed version provided by Ubuntu.
Where can I find more information about CVE-2019-15792?
You can find more information about CVE-2019-15792 on the Ubuntu security advisory for USN-4183-1 and USN-4184-1.