What’s Vulnerable › Vulnerabilities

CVE-2019-19377

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-11-29 · updated 2026-06-17
• Weakness: CWE-416

Description

In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c.

Affected products

• Linux kernel: from 2.6.12 before 4.19.156; from 4.20 before 5.4.33; from 5.5.0 before 5.5.18; from 5.6 before 5.6.5 — fixed in 4.19.156, 5.4.33, 5.5.18, 5.6.5
• Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows: all versions
• NetApp Cloud Backup: all versions
• NetApp Solidfire Baseboard Management Controller: all versions
• NetApp Steelstore Cloud Integrated Storage: all versions

How to fix

Upgrade to a fixed version: Linux kernel 4.19.156, 5.4.33, 5.5.18, 5.6.5. Check the vendor advisory for mitigations.

References

• https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19377
• https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html
• https://security.netapp.com/advisory/ntap-20200103-0001/
• https://usn.ubuntu.com/4367-1/
• https://usn.ubuntu.com/4369-1/
• https://usn.ubuntu.com/4414-1/
• https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19377
• https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html
• https://security.netapp.com/advisory/ntap-20200103-0001/
• https://usn.ubuntu.com/4367-1/
• https://usn.ubuntu.com/4369-1/
• https://usn.ubuntu.com/4414-1/

Get alerted when CVE-2019-19377 or the next vulnerability affects your stack