Lucene search

K
redhatcveRedhat.comRH:CVE-2019-19447
HistoryApr 28, 2020 - 12:10 a.m.

CVE-2019-19447

2020-04-2800:10:33
redhat.com
access.redhat.com
41

0.003 Low

EPSS

Percentile

68.4%

A flaw was found in the Linux kernel’s ext4_unlink function. An attacker could corrupt memory or escalate privileges when deleting a file from a recently unmounted specially crafted ext4 filesystem, including local, USB, and iSCSI.

Mitigation

Ext4 filesytems are built into the kernel so it is not possible to prevent the kernel module from loading. However, this flaw can be prevented by disallowing mounting of untrusted filesystems.

As mounting is a privileged operation, (except for device hotplug) removing the ability for mounting and unmounting will prevent this flaw from being exploited.