6259 matches found
CVE-2019-19036: NULL Pointer Dereference
btrfsrootnode in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcudereferenceroot-node can be zero...
Linux kernel null pointer dereference vulnerability (CNVD-2019-42385)
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A null pointer dereference vulnerability exists in btrfsrootnode in fs/btrfs/ctree.c in Linux kernel 5.3.12 and...
CVE-2019-19039: Insertion of Sensitive Information into Log File
btrfsfreeextent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfsprintleaf in a certain ENOENT case, which allows local users to obtain potentially sensitive information about register values via the dmesg program. NOTE: The BTRFS development team disputes this issues as no...
PT-2019-4253
Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.3.12 Description The issue in the Linux kernel's btrfs free extent function allows local users to obtain potentially sensitive information about register values via the dmesg program in a certain ENOENT case. Th...
Linux kernel null pointer dereference vulnerability (CNVD-2019-42382)
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A btrfsverifydevextents null pointer dereference vulnerability exists in fs/btrfs/volumes.c in Linux kernel versions...
CVE-2019-18885
fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfsverifydevextents NULL pointer dereference via a crafted btrfs image because fsdevices-devices is mishandled within finddevice, aka CID-09ba3bc9dd15...
CVE-2019-18885
fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfsverifydevextents NULL pointer dereference via a crafted btrfs image because fsdevices-devices is mishandled within finddevice, aka CID-09ba3bc9dd15...
DEBIAN-CVE-2019-18885
fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfsverifydevextents NULL pointer dereference via a crafted btrfs image because fsdevices-devices is mishandled within finddevice, aka CID-09ba3bc9dd15...
Null pointer dereference
fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfsverifydevextents NULL pointer dereference via a crafted btrfs image because fsdevices-devices is mishandled within finddevice, aka CID-09ba3bc9dd15...
CVE-2019-18885
fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfsverifydevextents NULL pointer dereference via a crafted btrfs image because fsdevices-devices is mishandled within finddevice, aka CID-09ba3bc9dd15...
UBUNTU-CVE-2019-18885
fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfsverifydevextents NULL pointer dereference via a crafted btrfs image because fsdevices-devices is mishandled within finddevice, aka CID-09ba3bc9dd15...
CVE-2019-18885
fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfsverifydevextents NULL pointer dereference via a crafted btrfs image because fsdevices-devices is mishandled within finddevice, aka CID-09ba3bc9dd15...
CVE-2019-18885
CVE-2019-18885 affects the Linux kernel (fs/btrfs/volumes.c) with a NULL pointer dereference in btrfs_verify_dev_extents when processing a crafted btrfs image. Root cause: fs_devices->devices is mishandled in find_device, enabling NULL dereferences in btrfs_verify_dev_extents. Impact per publi...
CVE-2019-18885
fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfsverifydevextents NULL pointer dereference via a crafted btrfs image because fsdevices-devices is mishandled within finddevice, aka CID-09ba3bc9dd15...
CVE-2019-18885
fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfsverifydevextents NULL pointer dereference via a crafted btrfs image because fsdevices-devices is mishandled within finddevice, aka CID-09ba3bc9dd15...
CVE-2019-18885: NULL Pointer Dereference
fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfsverifydevextents NULL pointer dereference via a crafted btrfs image because fsdevices-devices is mishandled within finddevice, aka CID-09ba3bc9dd15...
CVE-2019-15791
In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfsbtrfsioctlfdreplace installs an fd referencing a file from the lower filesystem without taking an additional reference to that file. After the btrfs ioctl completes this fd is closed, whi...
PT-2019-4754
Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.0 and 5.3 Description The issue is related to a non-upstream patch in the Linux kernel, specifically in the shiftfs component. It involves a type conversion error, where the shiftfs btrfs ioctl fd replace function calls...
CVE-2018-14611
An issue was discovered in the btrfs filesystem code in the Linux kernel. A use-after-free is possible in trymergefreespace when mounting a crafted btrfs image due to a lack of chunk type flag checks in btrfscheckchunkvalid in the fs/btrfs/volumes.c function. This could lead to a denial of servic...
PT-2019-4753
Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.0 and 5.3 Description The issue is related to an uncontrolled resource consumption in the shiftfs component of the Linux kernel. Exploitation of this issue may allow an attacker to cause a denial of service. The problem...