Wind River Support Network

HomeDefectsLINCD-610

Fixed

LINCD-610 : Security Advisory - linux - CVE-2019-19767

Created: Dec 12, 2019 Updated: Sep 13, 2022

Resolved Date: Feb 7, 2020

Found In Version: 10.20.3.0

Severity: Standard

Applicable for: Wind River Linux CD

Component/s: Kernel

Description

The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163.

CREATE(Triage):(User=admin) CVE-2019-19767 (https://nvd.nist.gov/vuln/detail/CVE-2019-19767)

CVEs

CVE-2019-19767