Security tracker / CVE-2019-19814

CVE-2019-19814

f2fs: Heap out-of-bounds write in __remove_dirty_segment()

References

• Debian security tracker
• cve.org
• https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19814

Notes

 bwh> __remove_dirty_segment() needs to range-check the variable t
 bwh> in the same way __locate_dirty_segment() does.

Bugs

Status

Branch	Status
upstream	needed
6.18-upstream-stable
6.17-upstream-stable
6.12-upstream-stable
6.6-upstream-stable
6.1-upstream-stable	needed
5.10-upstream-stable	needed
4.9-upstream-stable	ignored "EOL"
3.16-upstream-stable	ignored "EOL"
sid	needed
6.12-trixie-security	needed
6.1-bookworm-security	needed
5.10-bullseye-security	needed
4.9-stretch-security	ignored "f2fs is not supportable"
3.16-jessie-security	ignored "EOL"