CVE-2019-25160
- Source
- https://cve.org/CVERecord?id=CVE-2019-25160
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-25160.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2019-25160
- Downstream
- Related
- Published
- 2024-02-26T18:15:06.930Z
- Modified
- 2026-02-21T01:12:02.198121Z
- Severity
-
- 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
netlabel: fix out-of-bounds memory accesses
There are two array out-of-bounds memory accesses, one in cipsov4maplvlvalid(), the other in netlblbitmapwalk(). Both errors are embarassingly simple, and the fixes are straightforward.
As a FYI for anyone backporting this patch to kernels prior to v4.8, you'll want to apply the netlblbitmapwalk() patch to cipsov4bitmapwalk() as netlblbitmap_walk() doesn't exist before Linux v4.8.
- References
-
- https://git.kernel.org/stable/c/1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000
- https://git.kernel.org/stable/c/5578de4834fe0f2a34fedc7374be691443396d1f
- https://git.kernel.org/stable/c/97bc3683c24999ee621d847c9348c75d2fe86272
- https://git.kernel.org/stable/c/c61d01faa5550e06794dcf86125ccd325bfad950
- https://git.kernel.org/stable/c/dc18101f95fa6e815f426316b8b9a5cee28a334e
- https://git.kernel.org/stable/c/e3713abc4248aa6bcc11173d754c418b02a62cbb
- https://git.kernel.org/stable/c/fbf9578919d6c91100ec63acf2cba641383f6c78
- https://git.kernel.org/stable/c/fcfe700acdc1c72eab231300e82b962bac2b2b2c
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed24fbbeb15685f23ae63c1bffaa7868426e687a9eIntroduced0 Unknown introduced commit / All previous commits are affectedFixed6a31767f84ad31445865f1297d49937319f775c3Introduced0 Unknown introduced commit / All previous commits are affectedFixed6b50202a4d53bf527c640467bcff68b50a5e38a2Introduced0 Unknown introduced commit / All previous commits are affectedFixeda5073cb787160a3f852be1c380fe7f929d5c944fIntroduced0 Unknown introduced commit / All previous commits are affectedFixedd9896164529697fade02aafc65a06722f7191d68Introduced0 Unknown introduced commit / All previous commits are affectedFixedf4a652885326ba8148e742a0f2a5fc2ef4140711Introducedc3fe6924620fd733ffe8bc8a9da1e9cde08402b3Fixed0e3910b9b93147bb89eededfebe7bddb3826aa6e