CVE-2019-19318

In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags returns an already freed pointer,
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.4 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 57%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
5.0.21
linuxlinux_kernel
5.3.11
opensuseleap
15.1
canonicalubuntu_linux
14.04
canonicalubuntu_linux
16.04
canonicalubuntu_linux
18.04
debiandebian_linux
9.0
netappactive_iq_unified_manager
9.5 ≤
netappdata_availability_services
-
netapphci_management_node
-
netappsolidfire
-
netappsteelstore_cloud_integrated_storage
-
netappaff_a700s_firmware
-
netappfas8300_firmware
-
netappfas8700_firmware
-
netappaff_a400_firmware
-
netapph610s_firmware
-
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.106-3
fixed
bookworm (security)
6.1.112-1
fixed
bullseye
5.10.223-1
fixed
bullseye (security)
5.10.226-1
fixed
sid
6.11.6-1
fixed
trixie
6.11.5-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
bionic
not-affected
disco
ignored
eoan
Fixed 5.3.0-22.24
released
focal
not-affected
trusty
ignored
xenial
not-affected
linux-aws
bionic
not-affected
disco
ignored
eoan
Fixed 5.3.0-1007.8
released
focal
not-affected
trusty
ignored
xenial
not-affected
linux-aws-5.0
bionic
ignored
disco
dne
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-aws-5.3
bionic
not-affected
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-aws-hwe
bionic
dne
disco
dne
eoan
dne
focal
dne
trusty
dne
xenial
not-affected
linux-azure
bionic
ignored
disco
ignored
eoan
Fixed 5.3.0-1007.8
released
focal
not-affected
trusty
ignored
xenial
not-affected
linux-azure-4.15
bionic
not-affected
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-azure-5.3
bionic
not-affected
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-azure-edge
bionic
ignored
disco
dne
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-gcp
bionic
ignored
disco
ignored
eoan
Fixed 5.3.0-1008.9
released
focal
not-affected
trusty
dne
xenial
not-affected
linux-gcp-4.15
bionic
not-affected
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-gcp-5.3
bionic
not-affected
disco
dne
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-gcp-edge
bionic
ignored
disco
dne
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-gke-4.15
bionic
not-affected
disco
dne
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-gke-5.0
bionic
not-affected
disco
dne
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-gke-5.3
bionic
not-affected
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-hwe
bionic
not-affected
disco
dne
eoan
dne
focal
dne
trusty
dne
xenial
not-affected
linux-hwe-edge
bionic
ignored
disco
dne
eoan
dne
focal
dne
trusty
dne
xenial
ignored
linux-kvm
bionic
not-affected
disco
ignored
eoan
Fixed 5.3.0-1007.8
released
focal
not-affected
trusty
dne
xenial
not-affected
linux-lts-trusty
bionic
dne
disco
dne
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-lts-xenial
bionic
dne
disco
dne
eoan
dne
focal
dne
trusty
ignored
xenial
dne
linux-oem
bionic
not-affected
disco
ignored
eoan
not-affected
focal
dne
trusty
dne
xenial
ignored
linux-oem-5.6
bionic
dne
eoan
dne
focal
not-affected
trusty
dne
xenial
dne
linux-oem-osp1
bionic
not-affected
disco
ignored
eoan
not-affected
focal
dne
trusty
dne
xenial
dne
linux-oracle
bionic
not-affected
disco
ignored
eoan
Fixed 5.3.0-1006.7
released
focal
not-affected
trusty
dne
xenial
not-affected
linux-oracle-5.0
bionic
ignored
disco
dne
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-oracle-5.3
bionic
not-affected
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-raspi
bionic
dne
eoan
dne
focal
not-affected
trusty
dne
xenial
dne
linux-raspi2
bionic
not-affected
disco
ignored
eoan
Fixed 5.3.0-1012.14
released
focal
ignored
trusty
dne
xenial
not-affected
linux-raspi2-5.3
bionic
not-affected
eoan
dne
focal
dne
trusty
dne
xenial
dne
linux-riscv
bionic
dne
eoan
dne
focal
not-affected
trusty
dne
xenial
dne
linux-snapdragon
bionic
not-affected
disco
ignored
eoan
dne
focal
dne
trusty
dne
xenial
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
kernel-azure
suse enterprise sap 12 SP4
4.12.14-6.37.1
fixed
suse enterprise sap 12 SP5
4.12.14-16.10.1
fixed
suse enterprise sap 15 SP1
4.12.14-8.27.1
fixed
suse enterprise server 12 SP4
4.12.14-6.37.1
fixed
suse enterprise server 12 SP5
4.12.14-16.10.1
fixed
suse enterprise server 15 SP1
4.12.14-8.27.1
fixed
kernel-azure-base
suse enterprise sap 12 SP4
4.12.14-6.37.1
fixed
suse enterprise sap 12 SP5
4.12.14-16.10.1
fixed
suse enterprise sap 15 SP1
4.12.14-8.27.1
fixed
suse enterprise server 12 SP4
4.12.14-6.37.1
fixed
suse enterprise server 12 SP5
4.12.14-16.10.1
fixed
suse enterprise server 15 SP1
4.12.14-8.27.1
fixed
kernel-default
suse enterprise desktop 15 SP1
4.12.14-197.34.1
fixed
suse enterprise sap 12 SP4
4.12.14-95.48.1
fixed
suse enterprise sap 12 SP5
4.12.14-122.17.1
fixed
suse enterprise sap 15 SP1
4.12.14-197.34.1
fixed
suse enterprise server 12 SP4
4.12.14-95.48.1
fixed
suse enterprise server 12 SP5
4.12.14-122.17.1
fixed
suse enterprise server 15
4.12.14-150.52.1
fixed
suse enterprise server 15 SP1
4.12.14-197.34.1
fixed
kernel-default-base
suse enterprise desktop 15 SP1
4.12.14-197.34.1
fixed
suse enterprise sap 12 SP4
4.12.14-95.48.1
fixed
suse enterprise sap 12 SP5
4.12.14-122.17.1
fixed
suse enterprise sap 15 SP1
4.12.14-197.34.1
fixed
suse enterprise server 12 SP4
4.12.14-95.48.1
fixed
suse enterprise server 12 SP5
4.12.14-122.17.1
fixed
suse enterprise server 15
4.12.14-150.52.1
fixed
suse enterprise server 15 SP1
4.12.14-197.34.1
fixed
kernel-default-man
suse enterprise desktop 15 SP1
4.12.14-197.34.1
fixed
suse enterprise desktop 15 SP2
4.12.14-197.34.1
fixed
suse enterprise sap 12 SP4
4.12.14-95.48.1
fixed
suse enterprise sap 12 SP5
4.12.14-122.17.1
fixed
suse enterprise sap 15 SP1
4.12.14-197.34.1
fixed
suse enterprise sap 15 SP2
4.12.14-197.34.1
fixed
suse enterprise server 12 SP4
4.12.14-95.48.1
fixed
suse enterprise server 12 SP5
4.12.14-122.17.1
fixed
suse enterprise server 15
4.12.14-150.52.1
fixed
suse enterprise server 15 SP1
4.12.14-197.34.1
fixed
suse enterprise server 15 SP2
4.12.14-197.34.1
fixed
kernel-docs
suse enterprise desktop 15 SP1
4.12.14-197.34.1
fixed
suse enterprise sap 15 SP1
4.12.14-197.34.1
fixed
suse enterprise server 15
4.12.14-150.52.1
fixed
suse enterprise server 15 SP1
4.12.14-197.34.1
fixed
kernel-macros
suse enterprise desktop 15 SP1
4.12.14-197.34.1
fixed
suse enterprise sap 12 SP4
4.12.14-95.48.1
fixed
suse enterprise sap 12 SP5
4.12.14-122.17.1
fixed
suse enterprise sap 15 SP1
4.12.14-197.34.1
fixed
suse enterprise server 12 SP4
4.12.14-95.48.1
fixed
suse enterprise server 12 SP5
4.12.14-122.17.1
fixed
suse enterprise server 15
4.12.14-150.52.1
fixed
suse enterprise server 15 SP1
4.12.14-197.34.1
fixed
kernel-obs-build
suse enterprise desktop 15 SP1
4.12.14-197.34.1
fixed
suse enterprise sap 15 SP1
4.12.14-197.34.1
fixed
suse enterprise server 15
4.12.14-150.52.1
fixed
suse enterprise server 15 SP1
4.12.14-197.34.1
fixed
kernel-source
suse enterprise desktop 15 SP1
4.12.14-197.34.1
fixed
suse enterprise sap 12 SP4
4.12.14-95.48.1
fixed
suse enterprise sap 12 SP5
4.12.14-122.17.1
fixed
suse enterprise sap 15 SP1
4.12.14-197.34.1
fixed
suse enterprise server 12 SP4
4.12.14-95.48.1
fixed
suse enterprise server 12 SP5
4.12.14-122.17.1
fixed
suse enterprise server 15
4.12.14-150.52.1
fixed
suse enterprise server 15 SP1
4.12.14-197.34.1
fixed
kernel-source-azure
suse enterprise sap 12 SP4
4.12.14-6.37.1
fixed
suse enterprise sap 12 SP5
4.12.14-16.10.1
fixed
suse enterprise sap 15 SP1
4.12.14-8.27.1
fixed
suse enterprise server 12 SP4
4.12.14-6.37.1
fixed
suse enterprise server 12 SP5
4.12.14-16.10.1
fixed
suse enterprise server 15 SP1
4.12.14-8.27.1
fixed
kernel-syms
suse enterprise desktop 15 SP1
4.12.14-197.34.1
fixed
suse enterprise sap 12 SP4
4.12.14-95.48.1
fixed
suse enterprise sap 12 SP5
4.12.14-122.17.1
fixed
suse enterprise sap 15 SP1
4.12.14-197.34.1
fixed
suse enterprise server 12 SP4
4.12.14-95.48.1
fixed
suse enterprise server 12 SP5
4.12.14-122.17.1
fixed
suse enterprise server 15
4.12.14-150.52.1
fixed
suse enterprise server 15 SP1
4.12.14-197.34.1
fixed
kernel-syms-azure
suse enterprise sap 12 SP4
4.12.14-6.37.1
fixed
suse enterprise sap 12 SP5
4.12.14-16.10.1
fixed
suse enterprise sap 15 SP1
4.12.14-8.27.1
fixed
suse enterprise server 12 SP4
4.12.14-6.37.1
fixed
suse enterprise server 12 SP5
4.12.14-16.10.1
fixed
suse enterprise server 15 SP1
4.12.14-8.27.1
fixed
kernel-vanilla-base
suse enterprise server 15
4.12.14-150.52.1
fixed
kernel-zfcpdump
suse enterprise desktop 15 SP1
4.12.14-197.34.1
fixed
suse enterprise sap 15 SP1
4.12.14-197.34.1
fixed
suse enterprise server 15 SP1
4.12.14-197.34.1
fixed
reiserfs-kmp-default
suse enterprise server 15
4.12.14-150.52.1
fixed
Common Weakness Enumeration
References
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19318
https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html
https://security.netapp.com/advisory/ntap-20200103-0001/
https://usn.ubuntu.com/4414-1/
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19318
https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html
https://security.netapp.com/advisory/ntap-20200103-0001/
https://usn.ubuntu.com/4414-1/