CVE-2019-19319

Published: 27 November 2019

In the Linux kernel before 5.2, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/xattr.c when a large old_size value is used in a memset call, aka CID-345c0dbf3a30.

From the Ubuntu security team

It was discovered that the ext4 file system implementation in the Linux kernel did not properly handle setxattr operations in some situations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.

Priority

Low

CVSS 3 base score: 6.5

Status

Notes

Exploiting this vulnerability requires a crafted filesystem image to
be mounted

it's asserted by Jan Kara in the suse bug below that
345c0dbf3a30 (plus related commits) addresses the issue

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19319
• https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19319
• https://ubuntu.com/security/notices/USN-4391-1
• NVD
• Launchpad
• Debian