CVE-2019-19813
- EPSS 1.62%
- Veröffentlicht 17.12.2019 06:15:12
- Zuletzt bearbeitet 21.11.2024 04:35:26
In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in __mutex_lock in kernel/locking/mutex.c. This is related to mutex_can_spin_on_owner...
CVE-2019-19816
- EPSS 0.25%
- Veröffentlicht 17.12.2019 06:15:12
- Zuletzt bearbeitet 21.11.2024 04:35:26
In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in __btrfs_map_block in fs/btrfs/volumes.c, because a value of 1 for the number of data stripes is mishandl...
CVE-2019-19448
- EPSS 0.2%
- Veröffentlicht 08.12.2019 02:15:09
- Zuletzt bearbeitet 21.11.2024 04:34:45
In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer...
CVE-2019-19447
- EPSS 1.23%
- Veröffentlicht 08.12.2019 01:15:10
- Zuletzt bearbeitet 21.11.2024 04:34:45
In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c.
CVE-2019-19462
- EPSS 0.1%
- Veröffentlicht 30.11.2019 01:15:10
- Zuletzt bearbeitet 21.11.2024 04:34:47
relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result.
CVE-2019-19377
- EPSS 0.55%
- Veröffentlicht 29.11.2019 16:15:10
- Zuletzt bearbeitet 21.11.2024 04:34:40
In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c.
CVE-2019-19318
- EPSS 0.35%
- Veröffentlicht 28.11.2019 00:15:11
- Zuletzt bearbeitet 21.11.2024 04:34:34
In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags returns an already freed pointer,
CVE-2019-10174
- EPSS 1.04%
- Veröffentlicht 25.11.2019 11:15:10
- Zuletzt bearbeitet 21.11.2024 04:18:34
A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private methods in any class with Infinispan's privileges. The attacker can use reflection to in...
CVE-2019-19057
- EPSS 0.08%
- Veröffentlicht 18.11.2019 06:15:12
- Zuletzt bearbeitet 21.11.2024 04:34:05
Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() f...
CVE-2019-19060
- EPSS 0.63%
- Veröffentlicht 18.11.2019 06:15:12
- Zuletzt bearbeitet 21.11.2024 04:34:06
A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-ab612b1daf41.