CVE-2019-19319: In the Linux kernel before 5.2, a setxattr operation, after a mount of a crafted ext4 image, can cause a sl...

Security readout for executives and security teams

CVE-2019-19319 is a Linux kernel ext4 filesystem memory corruption issue. A crafted ext4 image can trigger an out-of-bounds write when extended attributes are changed. Business risk is highest where users, services, or automation mount untrusted disk images or removable media. Exposure is most plausible on Linux systems running kernels before 5.2 or affected vendor backports, especially hosts that mount untrusted ext4 filesystems, disk images, removable media, or appliance-managed storage. The bundle does not provide a complete affected product matrix. Treat as a targeted infrastructure hardening item, not an internet-wide emergency based on current evidence. Patch routinely but prioritize systems handling untrusted filesystem images, removable media, or storage workflows where kernel compromise would have high impact. Mitigation focus: Apply kernel updates from the relevant Linux distribution or appliance vendor.; Prioritize Debian, Ubuntu, openSUSE, SUSE, and NetApp guidance where applicable.; Restrict mounting of untrusted ext4 images and removable media..

Prepared

Jun 6, 2026, 12:31 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.