CVE-2019-19037

CVSS v3.1 5.5 (Medium)

CVSS v2.0 4.3 (Medium)

EPSS 0.11 % (45^th)

Affected Products 1

Advisories 2

ext4_empty_dir in fs/ext4/namei.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because ext4_read_dirblock(inode,0,DIRENT_HTREE) can be zero.

Weaknesses

CWE-476: NULL Pointer Dereference

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2019-11-21 03:15:10
(4 years ago)
Updated Date: 2019-12-05 05:15:15
(4 years ago)

Affected Products

Linux

Linux Kernel

Configuration #1

		CPE23	From	Up To
	Linux Kernel 5.3.12 and prior versions	cpe:2.3:o:linux:linux_kernel		<= 5.3.12