Patchwire CVEs, their patch status, and feeds to follow them

CVE-2019-19813

Fixed in a distro release EPSS 2%

In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in __mutex_lock in kernel/locking/mutex.c. This is related to mutex_can_spin_on_owner in kernel/locking/mutex.c, __btrfs_qgroup_free_meta in fs/btrfs/qgroup.c, and btrfs_insert_delayed_items in fs/btrfs/delayed-inode.c.

Published 2019-12-17 · CVE record · OSV

Products: linux_kernel, canonical ubuntu_linux, debian_linux, netapp active_iq_unified_manager, netapp data_availability_services, netapp hci_management_node, netapp solidfire, netapp steelstore_cloud_integrated_storage, netapp aff_a700s_firmware, netapp fas8300_firmware, netapp fas8700_firmware, netapp aff_a400_firmware, netapp h610s_firmware

Distro releases

ReleasePackageFixed in
Amazon Linux 2kernel4.14.214-160.339.amzn2
Amazon Linux 2kernel-devel4.14.214-160.339.amzn2
Amazon Linux 2kernel-headers4.14.214-160.339.amzn2
Amazon Linux 2kernel-livepatch-4.14.214-160.3391.0-0.amzn2
Amazon Linux 2kernel-tools4.14.214-160.339.amzn2
Amazon Linux 2kernel-tools-devel4.14.214-160.339.amzn2
Amazon Linux 2perf4.14.214-160.339.amzn2
Amazon Linux 2python-perf4.14.214-160.339.amzn2
Debian 12linux5.2.6-1
Debian 13linux5.2.6-1
Debian 14linux5.2.6-1
Debian 9linux4.9.258-1
Debian 9linux-4.194.19.146-1~deb9u1
Ubuntu 16.04 LTSlinux4.4.0-201.233
Ubuntu 16.04 LTSlinux-aws4.4.0-1121.135
Ubuntu 16.04 LTSlinux-aws-hwe4.15.0-1074.78~16.04.1
Ubuntu 16.04 LTSlinux-aws-hwe4.15.0-1079.83~16.04.1
Ubuntu 16.04 LTSlinux-azure4.15.0-1091.101~16.04.1
Ubuntu 16.04 LTSlinux-gcp4.15.0-1078.88~16.04.1
Ubuntu 16.04 LTSlinux-gcp4.15.0-1080.90~16.04.1
Ubuntu 16.04 LTSlinux-hwe4.15.0-112.113~16.04.1
Ubuntu 16.04 LTSlinux-hwe4.15.0-107.108~16.04.1
Ubuntu 16.04 LTSlinux-hwe-edgeno fix
Ubuntu 16.04 LTSlinux-kvm4.4.0-1087.96
Ubuntu 16.04 LTSlinux-oracle4.15.0-1046.50~16.04.1
Ubuntu 16.04 LTSlinux-oracle4.15.0-1050.54~16.04.1
Ubuntu 16.04 LTSlinux-raspi24.4.0-1145.155
Ubuntu 16.04 LTSlinux-snapdragon4.4.0-1149.159
Ubuntu 18.04 LTSlinux4.15.0-109.110
Ubuntu 18.04 LTSlinux-aws4.15.0-1077.81
Ubuntu 18.04 LTSlinux-aws-5.0no fix
Ubuntu 18.04 LTSlinux-azureno fix
Ubuntu 18.04 LTSlinux-azure-4.154.15.0-1091.101
Ubuntu 18.04 LTSlinux-azure-edgeno fix
Ubuntu 18.04 LTSlinux-gcpno fix
Ubuntu 18.04 LTSlinux-gcp-4.154.15.0-1080.90
Ubuntu 18.04 LTSlinux-gcp-4.154.15.0-1078.88
Ubuntu 18.04 LTSlinux-gcp-edgeno fix
Ubuntu 18.04 LTSlinux-gke-4.154.15.0-1066.69
Ubuntu 18.04 LTSlinux-gke-4.154.15.0-1064.67
Ubuntu 18.04 LTSlinux-hwe5.3.0-26.28~18.04.1
Ubuntu 18.04 LTSlinux-hwe-edge5.3.0-19.20~18.04.2
Ubuntu 18.04 LTSlinux-kvm4.15.0-1069.70
Ubuntu 18.04 LTSlinux-oem4.15.0-1091.101
Ubuntu 18.04 LTSlinux-oracle4.15.0-1048.52
Ubuntu 18.04 LTSlinux-oracle-5.0no fix
Ubuntu 18.04 LTSlinux-raspi24.15.0-1065.69
Ubuntu 18.04 LTSlinux-snapdragon4.15.0-1081.88
Ubuntu 18.04 LTSlinux-snapdragon4.15.0-1083.91
Ubuntu 20.04 LTSlinux-azure-fdeno fix
Ubuntu 20.04 LTSlinux-gkeno fix
Ubuntu 20.04 LTSlinux-raspi2no fix
Ubuntu 22.04 LTSlinux-intel-iot-realtimeno fix
Ubuntu 22.04 LTSlinux-realtimeno fix
Ubuntu 22.04 LTSlinux-riscvno fix
Ubuntu 24.04 LTSlinux-raspi-realtimeno fix
Ubuntu Pro 14.04 LTSlinuxno fix
Ubuntu Pro 14.04 LTSlinux-aws4.4.0-1085.89
Ubuntu Pro 14.04 LTSlinux-azure4.15.0-1091.101~14.04.1
Ubuntu Pro 14.04 LTSlinux-lts-xenial4.4.0-201.233~14.04.1
Ubuntu Pro 20.04 LTSlinux-azure-fde-5.155.15.0-1114.123~20.04.1
Ubuntu Pro FIPS-updates 16.04 LTSlinux-fips4.4.0-1055.61
Ubuntu Pro FIPS-updates 18.04 LTSlinux-aws-fips4.15.0-2022.22
Ubuntu Pro FIPS-updates 18.04 LTSlinux-azure-fips4.15.0-2006.7
Ubuntu Pro FIPS-updates 18.04 LTSlinux-fips4.15.0-1037.42
Ubuntu Pro FIPS 16.04 LTSlinux-fipsno fix
Ubuntu Pro FIPS 18.04 LTSlinux-aws-fipsno fix
Ubuntu Pro FIPS 18.04 LTSlinux-azure-fipsno fix
Ubuntu Pro FIPS 18.04 LTSlinux-gcp-fipsno fix