CVE-2019-19768: In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/t...

Security readout for executives and security teams

CVE-2019-19768 is a Linux kernel memory safety flaw in block I/O tracing. The public bundle identifies a use-after-free read in Linux kernel 5.4.0-rc2, but does not provide CVSS, CWE, exact affected distributions, or business-impact detail. Likely exposure is limited to systems running affected Linux kernel builds or vendor products incorporating them. The bundle does not enumerate exact affected versions beyond Linux kernel 5.4.0-rc2, so organizations should map their kernels and appliances against the listed vendor advisories. Treat this as a targeted hygiene item, not an emergency based on the provided evidence. Prioritize internet-facing, regulated, or appliance-dependent environments only after confirming affected kernels or vendor exposure. Mitigation focus: Review Linux, distribution, and appliance vendor advisories for CVE-2019-19768.; Apply supported vendor kernel updates where the advisory marks systems affected.; Reboot systems after kernel updates so the fixed kernel is active..

Prepared

Jun 6, 2026, 03:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.