ByteOS Network

NVD Vulnerability Details :

CVE-2019-19927

Analyzed

Source-cve@mitre.org

Published At-31 Dec, 2019 | 02:15

Updated At-14 May, 2020 | 14:48

In the Linux kernel 5.0.0-rc7 (as distributed in ubuntu/linux.git on kernel.ubuntu.com), mounting a crafted f2fs filesystem image and performing some operations can lead to slab-out-of-bounds read access in ttm_put_pages in drivers/gpu/drm/ttm/ttm_page_alloc.c. This is related to the vmwgfx or ttm module.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	6.0	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H
Primary	2.0	3.6	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:P

CPE Matches

Linux Kernel Organization, Inc

>>linux_kernel>>5.0

cpe:2.3:o:linux:linux_kernel:5.0:rc7:*:*:*:*:*:*

openSUSE

>>leap>>15.1

cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-125	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html	cve@mitre.org	Third Party Advisory
https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19927	cve@mitre.org	Exploit Third Party Advisory
https://github.com/torvalds/linux/commit/453393369dc9806d2455151e329c599684762428	cve@mitre.org	Patch Third Party Advisory
https://github.com/torvalds/linux/commit/a66477b0efe511d98dde3e4aaeb189790e6f0a39	cve@mitre.org	Patch Third Party Advisory
https://github.com/torvalds/linux/commit/ac1e516d5a4c56bf0cb4a3dfc0672f689131cfd4	cve@mitre.org	Patch Third Party Advisory
https://security.netapp.com/advisory/ntap-20200204-0002/	cve@mitre.org	Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History