PT-2019-4255
CVE-2019-19036
·
Published
2019-09-09
·
Updated
2025-09-29
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 5.3.12
Description
The issue is related to a NULL pointer dereference in the
btrfs root node function, located in fs/btrfs/ctree.c. This can be triggered because rcu dereference(root->node) can be zero, leading to a potential denial of service. An attacker could exploit this to cause a service disruption.Recommendations
For Linux kernel versions through 5.3.12, update to a version newer than 5.3.12 to resolve the issue.
At the moment, there is no information about other specific mitigation measures for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾