CVE-2019-19036

5.5 mediumEPSS 1.8%

Medium (5.5) in linux linux kernel. EPSS 1.8% chance of exploitation in the next 30 days.

btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-476
Published: 2019-11-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

linux:linux_kernel

References

http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19036
https://security.netapp.com/advisory/ntap-20191205-0001/
https://usn.ubuntu.com/4414-1/
https://usn.ubuntu.com/4439-1/

Check your stack JSON