Alerts This Week
Warning Icon 1 1,220
Alerts This Week
Warning Icon 1 1,220

Debian LTS: DLA-2483-1 Critical: Linux Kernel Privilege Escalation

debian lts
Calendar Grey December 10, 2020
Dist Debian Esm H88
Multiple significant vulnerabilities found in the Debian LTS linux-4.19 kernel. Make sure to upgrade to prevent potential denial of service attacks and data leaks.
Several vulnerabilities have been discovered in the Linux kernel that may lead to the execution of arbitrary code, privilege escalation, denial of service or information leaks
Topics%20covered

Topics Covered

security advisory denial of service information leak critical code execution privilege escalation Debian linux kernel linux-4-19

Summary

"Team bobfuzzer" reported a bug in Btrfs that could lead to an
assertion failure (WARN). A user permitted to mount and access
arbitrary filesystems could use this to cause a denial of service
(crash) if the panic_on_warn kernel parameter is set.

CVE-2019-19377

"Team bobfuzzer" reported a bug in Btrfs that could lead to a
use-after-free. A user permitted to mount and access arbitrary
filesystems could use this to cause a denial of service (crash or
memory corruption) or possibly for privilege escalation.

CVE-2019-19770

The syzbot tool discovered a race condition in the block I/O
tracer (blktrace) that could lead to a system crash. Since
blktrace can only be controlled by privileged users, the security
impact of this is unclear.

CVE-2019-19816

"Team bobfuzzer" reported a bug in Btrfs that could lead to an
out-of-bounds write. A user permitted to mount and access
arbitrary filesystems could use this to cause a denial of service

Read the Full Advisory


Severity
critical
Lowest
Low
Medium
High
Critical

-------------------------------------------------------------------------Package: linux-4.19
Version: 4.19.160-2~deb9u1
CVE ID: CVE-2019-19039 CVE-2019-19377 CVE-2019-19770 CVE-2019-19816
Debian Bug: 949863 968623 971058

Topics%20covered

Topics Covered

security advisory denial of service information leak critical code execution privilege escalation Debian linux kernel linux-4-19

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here