cve/2019/CVE-2019-19815.md

CVE-2019-19815

Description

In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause a NULL pointer dereference in f2fs_recover_fsync_data in fs/f2fs/recovery.c. This is related to F2FS_P_SB in fs/f2fs/f2fs.h.

POC

Reference

• https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19815
• https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19815

Github

• https://github.com/ARPSyndicate/cvemon