Wind River Support Network

HomeDefectsLIN1019-3777

Fixed

LIN1019-3777 : Security Advisory - linux - CVE-2019-19767

Created: Dec 12, 2019 Updated: Jan 9, 2020

Resolved Date: Dec 31, 2019

Found In Version: 10.19.45.1

Fix Version: 10.19.45.3

Severity: Standard

Applicable for: Wind River Linux LTS 19

Component/s: Kernel

Description

The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163.

CREATE(Triage):(User=admin) [CVE-2019-19767|https://nvd.nist.gov/vuln/detail/CVE-2019-19767]

CVEs

CVE-2019-19767