CVE-2019-19449: High severity linux kernel vulnerability
In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fsbuildsegmentmanager in fs/f2fs/segment.c, related to initminmaxmtime in fs/f2fs/segment.c (because the second argument to getsegentry is not validated).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-19449?
CVE-2019-19449 has been classified as a high-severity vulnerability due to its potential for causing slab-out-of-bounds read access.
How do I fix CVE-2019-19449?
To mitigate CVE-2019-19449, upgrade the Linux kernel to a version later than 5.0.21 that addresses this vulnerability.
What versions of Linux are affected by CVE-2019-19449?
CVE-2019-19449 specifically affects the Linux kernel version 5.0.21.
What can be exploited in CVE-2019-19449?
CVE-2019-19449 can be exploited through crafted f2fs filesystem images leading to potential memory vulnerabilities.
Where in the code is CVE-2019-19449 located?
CVE-2019-19449 is found in the f2fs_build_segment_manager function within fs/f2fs/segment.c.