DEBIAN-CVE-2019-19770

Advisory lineage Upstream: 1 Downstream: 1
Upstream
CVE-2019-19770
Downstream
DLA-2483-1
Published: 12 Dec 2019, 20:15
Last modified:28 Apr 2026, 20:20

Vulnerability Summary

Overall Risk (default)
medium
33/100
CVSS Score
8.2 HIGH
3.1 (osv_debian)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

12 Dec 2019, 20:15
Published
Vulnerability first disclosed
28 Apr 2026, 20:20
Last Modified
Vulnerability information updated

Description

In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file). NOTE: Linux kernel developers dispute this issue as not being an issue with debugfs, instead this is an issue with misuse of debugfs within blktrace

CVSS Metrics

  • v3.1•HIGH•Score: 8.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected Systems

  • debian•linux

    < 5.7.17-1 | < 5.7.17-1 | < 5.7.17-1 | < 5.7.17-1

References (1)