CVE-2019-19447: Use After Free
A flaw was found in the Linux kernel's ext4unlink function. An attacker could corrupt memory or escalate privileges when deleting a file from a recently unmounted specially crafted ext4 filesystem, including local, USB, and iSCSI.
Other sources
A user with permissions to mount and unmount a crafted ext4 file system, via any transport mechanism (local, USB, ISCSI) can lead to a use-after-free when attempting to delete a directory after the disk has been umounted.
This can lead to possible memory corruption and privilege escalation.
External Reference:
https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19447 https://bugzilla.kernel.org/showbug.cgi?id=205433
— Red Hat
In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4putsuper in fs/ext4/super.c, related to dumporphanlist in fs/ext4/super.c.
Affected Software
Remediation
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2019-19447?
CVE-2019-19447 is a vulnerability in the Linux kernel's ext4_unlink function that allows an attacker to corrupt memory or escalate privileges when deleting a file from a specially crafted ext4 filesystem.
How severe is CVE-2019-19447?
CVE-2019-19447 has a severity rating of 7.8, which is considered high.
Which software versions are affected by CVE-2019-19447?
CVE-2019-19447 affects Linux kernel versions 5.0.21 and earlier.
How can I fix CVE-2019-19447?
To fix CVE-2019-19447, you should update your affected Linux kernel to version 5.0.22 or later.
Are there any references for CVE-2019-19447?
Yes, you can find more information about CVE-2019-19447 on the following links: [link1](https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19447), [link2](https://bugzilla.kernel.org/show_bug.cgi?id=205433), [link3](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1781680).