CVE-2019-18885
Published
CVSS v3
5.5
MEDIUM
CVSS v2
2.1
LOW
Affected
2
PROJECTS
Description
fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices->devices is mishandled within find_device, aka CID-09ba3bc9dd15.
GitHub