Wind River Support Network

HomeDefectsLIN1019-3467

Fixed

LIN1019-3467 : Security Advisory - linux - CVE-2019-18885

Created: Nov 14, 2019 Updated: Nov 28, 2019

Resolved Date: Nov 28, 2019

Found In Version: 10.19.45.1

Severity: Standard

Applicable for: Wind River Linux LTS 19

Component/s: Kernel

Description

fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices->devices is mishandled within find_device, aka CID-09ba3bc9dd15.

CREATE(Triage):(User=admin) [CVE-2019-18885|https://nvd.nist.gov/vuln/detail/CVE-2019-18885]

CVEs

CVE-2019-18885