CVE-2019-19814

HIGH

Linux Kernel 5.0.21 - Out-of-bounds Write via Crafted F2FS Filesystem Mount

Title source: llm

Description

In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out-of-bounds write access because an array is bounded by the number of dirty types (8) but the array index can exceed this.

References (2)

Core 2

Core References

Exploit, Third Party Advisory x_refsource_misc

https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19814

View Exploit ZIP pw:eip

Vendor Advisory x_refsource_confirm

https://security.netapp.com/advisory/ntap-20200103-0001/

Scores

CVSS v3 7.8

EPSS 0.0330

EPSS Percentile 87.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (1)

linux/linux_kernel 5.0.21

Published Dec 17, 2019

Tracked Since Feb 18, 2026