CVE-2019-19770: In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/...

Security readout for executives and security teams

This CVE concerns a reported Linux kernel use-after-free read tied to debugfs removal in kernel 4.19.83. Kernel developers disputed framing it as a debugfs flaw, saying the underlying problem was blktrace misuse. Public sources do not provide CVSS, confirmed exploitation, or a standalone upstream fix in the CVE record. Exposure is most plausible on systems running affected 4.19-era Linux kernels or downstream vendor kernels that included vulnerable blktrace/debugfs behavior. Sources do not define prerequisites, configurations, or affected product ranges beyond vendor advisories. Handle through normal Linux kernel and appliance patch governance unless a vendor advisory flags your product as affected. The evidence does not support emergency action based on exploitation, but older maintained kernels should not be left unpatched. Mitigation focus: Check Linux distribution and appliance vendor advisories for kernel updates referencing CVE-2019-19770.; Apply vendor-supported kernel updates where this CVE is included.; For NetApp environments, follow the linked NetApp advisory guidance..

Prepared

Jun 6, 2026, 03:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.