CVE-2019-19447: Linux Kernel

High severity, CVSS 7.8. EPSS: 3.5% chance of exploitation in the next 30 days.

In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c.

Affected products

• Linux Linux Kernel: from 2.6.12, before 3.16.82 (fixed in 3.16.82); from 3.17, before 4.4.208 (fixed in 4.4.208); from 4.5.0, before 4.9.208 (fixed in 4.9.208); from 4.10, before 4.14.159 (fixed in 4.14.159); from 4.15, before 4.19.90 (fixed in 4.19.90); from 4.20, before 5.3.17 (fixed in 5.3.17); …
• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp Cloud Backup: affected versions not specified
• Netapp Data Availability Services: affected versions not specified
• Netapp Hci Baseboard Management Controller: version h610s only
• Netapp Solidfire Baseboard Management Controller: affected versions not specified
• Netapp Steelstore Cloud Integrated Storage: affected versions not specified

Published 2019-12-08. Last modified 2026-06-17.