UBUNTU-CVE-2019-16714

Advisory lineage Upstream: 1 Downstream: 1

Upstream

CVE-2019-16714

Downstream

USN-4157-2

Published: 23 Sept 2019, 12:15

Last modified:21 May 2026, 18:04

Vulnerability Summary

Overall Risk (default)

medium

30/100

CVSS Score

7.5 HIGH

3.1 (osv_ubuntu)

EPSS Score

No data

KEV

Not listed

Ransomware

No reports

Public exploits

None found

Dark Web

Not detected

Timeline

23 Sept 2019, 12:15

Published

Vulnerability first disclosed

21 May 2026, 18:04

Last Modified

Vulnerability information updated

Description

In the Linux kernel before 5.2.14, rds6_inc_info_copy in net/rds/recv.c allows attackers to obtain sensitive information from kernel stack memory because tos and flags fields are not initialized.

CVSS Metrics

v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Systems

ubuntu•linux
all
ubuntu•linux-aws
all
ubuntu•linux-azure
all | < 5.0.0-1023.24~18.04.1
ubuntu•linux-gcp
< 5.0.0-1021.21~18.04.1
ubuntu•linux-gke-5.0
< 5.0.0-1023.23~18.04.2
ubuntu•linux-hwe
< 5.0.0-32.34~18.04.2
ubuntu•linux-hwe-edge
all
ubuntu•linux-lts-xenial
all
ubuntu•linux-oem-osp1
< 5.0.0-1025.28