CVE-2019-25160

Advisory lineage Upstream: 0 Downstream: 6
Modified
Published: 26 Feb 2024, 17:20
Last modified:11 May 2026, 13:41

Vulnerability Summary

Overall Risk (default)
medium
28/100
CVSS Score
7.1 HIGH
v3.1 (nvd)
EPSS Score
0.01% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

26 Feb 2024, 17:20
Published
Vulnerability first disclosed
11 May 2026, 13:41
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: netlabel: fix out-of-bounds memory accesses There are two array out-of-bounds memory accesses, one in cipso_v4_map_lvl_valid(), the other in netlbl_bitmap_walk(). Both errors are embarassingly simple, and the fixes are straightforward. As a FYI for anyone backporting this patch to kernels prior to v4.8, you'll want to apply the netlbl_bitmap_walk() patch to cipso_v4_bitmap_walk() as netlbl_bitmap_walk() doesn't exist before Linux v4.8.

CVSS Metrics

  • v3.1•HIGH•Score: 7.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS Trends

Current EPSS score: 0.01%• Percentile: 3%

Techniques & Countermeasures

  • CWE-125•Out-of-bounds Read

    The product reads data past the end, or before the beginning, of the intended buffer.

Affected Systems

  • linux•linux

    ≥ 446fda4f26822b2d42ab3396aafcedf38a9ff2b6, < 97bc3683c24999ee621d847c9348c75d2fe86272 | ≥ 446fda4f26822b2d42ab3396aafcedf38a9ff2b6, < c61d01faa5550e06794dcf86125ccd325bfad950 | ≥ 446fda4f26822b2d42ab3396aafcedf38a9ff2b6, < dc18101f95fa6e815f426316b8b9a5cee28a334e | ≥ 446fda4f26822b2d42ab3396aafcedf38a9ff2b6, < 1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000 | ≥ 446fda4f26822b2d42ab3396aafcedf38a9ff2b6, < fcfe700acdc1c72eab231300e82b962bac2b2b2c | ≥ 446fda4f26822b2d42ab3396aafcedf38a9ff2b6, < e3713abc4248aa6bcc11173d754c418b02a62cbb | ≥ 446fda4f26822b2d42ab3396aafcedf38a9ff2b6, < fbf9578919d6c91100ec63acf2cba641383f6c78 | ≥ 446fda4f26822b2d42ab3396aafcedf38a9ff2b6, < 5578de4834fe0f2a34fedc7374be691443396d1f | 2.6.19

  • linux•linux_kernel

    ≥ 2.6.19, < 3.16.66 | ≥ 3.17.0, < 3.18.137 | ≥ 3.19.0, < 4.4.177 | ≥ 4.5.0, < 4.9.163 | ≥ 4.10.0, < 4.14.106 | ≥ 4.15.0, < 4.19.28 | ≥ 4.20.0, < 4.20.15

References (8)