Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2019-19815

Description

In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause a NULL pointer dereference in f2fs_recover_fsync_data in fs/f2fs/recovery.c. This is related to F2FS_P_SB in fs/f2fs/f2fs.h.

POC

Reference

- https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19815

Github

- https://github.com/ARPSyndicate/cvemon