Wind River Support Network

HomeDefectsLIN8-11907

Fixed

LIN8-11907 : Security Advisory - linux - CVE-2019-19767

Created: Dec 12, 2019 Updated: Sep 23, 2020

Resolved Date: Sep 21, 2020

Found In Version: 8.0.0.1

Fix Version: 8.0.0.34

Severity: Standard

Applicable for: Wind River Linux 8

Component/s: Kernel

Description

The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163.

CREATE(Triage):(User=admin) [CVE-2019-19767|https://nvd.nist.gov/vuln/detail/CVE-2019-19767]

CVEs

CVE-2019-19767