GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2019-25160 (GCVE-0-2019-25160)

Vulnerability from cvelistv5 – Published: 2024-02-26 17:20 – Updated: 2026-08-05 08:43
VLAI
Title
netlabel: fix out-of-bounds memory accesses
Summary
In the Linux kernel, the following vulnerability has been resolved: netlabel: fix out-of-bounds memory accesses There are two array out-of-bounds memory accesses, one in cipso_v4_map_lvl_valid(), the other in netlbl_bitmap_walk(). Both errors are embarassingly simple, and the fixes are straightforward. As a FYI for anyone backporting this patch to kernels prior to v4.8, you'll want to apply the netlbl_bitmap_walk() patch to cipso_v4_bitmap_walk() as netlbl_bitmap_walk() doesn't exist before Linux v4.8.
Severity
9.1 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-02-27 16:02 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 446fda4f26822b2d42ab3396aafcedf38a9ff2b6 , < 97bc3683c24999ee621d847c9348c75d2fe86272 (git)
Affected: 446fda4f26822b2d42ab3396aafcedf38a9ff2b6 , < c61d01faa5550e06794dcf86125ccd325bfad950 (git)
Affected: 446fda4f26822b2d42ab3396aafcedf38a9ff2b6 , < dc18101f95fa6e815f426316b8b9a5cee28a334e (git)
Affected: 446fda4f26822b2d42ab3396aafcedf38a9ff2b6 , < 1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000 (git)
Affected: 446fda4f26822b2d42ab3396aafcedf38a9ff2b6 , < fcfe700acdc1c72eab231300e82b962bac2b2b2c (git)
Affected: 446fda4f26822b2d42ab3396aafcedf38a9ff2b6 , < e3713abc4248aa6bcc11173d754c418b02a62cbb (git)
Affected: 446fda4f26822b2d42ab3396aafcedf38a9ff2b6 , < fbf9578919d6c91100ec63acf2cba641383f6c78 (git)
Affected: 446fda4f26822b2d42ab3396aafcedf38a9ff2b6 , < 5578de4834fe0f2a34fedc7374be691443396d1f (git)
guessed Create a notification for this product.
Linux Linux Affected: 2.6.19
Unaffected: 0 , < 2.6.19 (semver)
Unaffected: 3.16.66 , ≤ 3.16.* (semver)
Unaffected: 3.18.137 , ≤ 3.18.* (semver)
Unaffected: 4.4.177 , ≤ 4.4.* (semver)
Unaffected: 4.9.163 , ≤ 4.9.* (semver)
Unaffected: 4.14.106 , ≤ 4.14.* (semver)
Unaffected: 4.19.28 , ≤ 4.19.* (semver)
Unaffected: 4.20.15 , ≤ 4.20.* (semver)
Unaffected: 5.0 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2019-25160",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-02-27T16:02:54.112450Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:12:00.236Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:00:19.401Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/97bc3683c24999ee621d847c9348c75d2fe86272"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/c61d01faa5550e06794dcf86125ccd325bfad950"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/dc18101f95fa6e815f426316b8b9a5cee28a334e"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/fcfe700acdc1c72eab231300e82b962bac2b2b2c"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e3713abc4248aa6bcc11173d754c418b02a62cbb"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/fbf9578919d6c91100ec63acf2cba641383f6c78"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/5578de4834fe0f2a34fedc7374be691443396d1f"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ipv4/cipso_ipv4.c",
            "net/netlabel/netlabel_kapi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "97bc3683c24999ee621d847c9348c75d2fe86272",
              "status": "affected",
              "version": "446fda4f26822b2d42ab3396aafcedf38a9ff2b6",
              "versionType": "git"
            },
            {
              "lessThan": "c61d01faa5550e06794dcf86125ccd325bfad950",
              "status": "affected",
              "version": "446fda4f26822b2d42ab3396aafcedf38a9ff2b6",
              "versionType": "git"
            },
            {
              "lessThan": "dc18101f95fa6e815f426316b8b9a5cee28a334e",
              "status": "affected",
              "version": "446fda4f26822b2d42ab3396aafcedf38a9ff2b6",
              "versionType": "git"
            },
            {
              "lessThan": "1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000",
              "status": "affected",
              "version": "446fda4f26822b2d42ab3396aafcedf38a9ff2b6",
              "versionType": "git"
            },
            {
              "lessThan": "fcfe700acdc1c72eab231300e82b962bac2b2b2c",
              "status": "affected",
              "version": "446fda4f26822b2d42ab3396aafcedf38a9ff2b6",
              "versionType": "git"
            },
            {
              "lessThan": "e3713abc4248aa6bcc11173d754c418b02a62cbb",
              "status": "affected",
              "version": "446fda4f26822b2d42ab3396aafcedf38a9ff2b6",
              "versionType": "git"
            },
            {
              "lessThan": "fbf9578919d6c91100ec63acf2cba641383f6c78",
              "status": "affected",
              "version": "446fda4f26822b2d42ab3396aafcedf38a9ff2b6",
              "versionType": "git"
            },
            {
              "lessThan": "5578de4834fe0f2a34fedc7374be691443396d1f",
              "status": "affected",
              "version": "446fda4f26822b2d42ab3396aafcedf38a9ff2b6",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ipv4/cipso_ipv4.c",
            "net/netlabel/netlabel_kapi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.19"
            },
            {
              "lessThan": "2.6.19",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "3.16.*",
              "status": "unaffected",
              "version": "3.16.66",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "3.18.*",
              "status": "unaffected",
              "version": "3.18.137",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.4.*",
              "status": "unaffected",
              "version": "4.4.177",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.163",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.106",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.28",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.20.*",
              "status": "unaffected",
              "version": "4.20.15",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "3.16.66",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "3.18.137",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.4.177",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.163",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.106",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.28",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.20.15",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.0",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetlabel: fix out-of-bounds memory accesses\n\nThere are two array out-of-bounds memory accesses, one in\ncipso_v4_map_lvl_valid(), the other in netlbl_bitmap_walk().  Both\nerrors are embarassingly simple, and the fixes are straightforward.\n\nAs a FYI for anyone backporting this patch to kernels prior to v4.8,\nyou\u0027ll want to apply the netlbl_bitmap_walk() patch to\ncipso_v4_bitmap_walk() as netlbl_bitmap_walk() doesn\u0027t exist before\nLinux v4.8."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - Crafted IPv4 packets with CIPSO options reach the bug via ip_rcv_finish_core -\u003e ip_rcv_options -\u003e ip_options_compile -\u003e cipso_v4_validate -\u003e cipso_v4_map_lvl_valid/netlbl_bitmap_walk, with no local access required. This is a net/ stack path processing remote peer packet data.\nAC:L - With a CIPSO MAP_TRANS DOI configured (the labeled-networking deployment this subsystem targets), an attacker reliably triggers the OOB by setting an out-of-range level byte or category bitmap; DOI values are probeable via ICMP parameter-problem offsets. No race or other attacker-uncontrollable condition is required.\nPR:N - Incoming skbs take the CIPSO path in __ip_options_compile without CAP_NET_RAW or any authentication; the privilege check applies only when skb is NULL (setsockopt). A remote unauthenticated sender can trigger the vulnerable validation.\nUI:N - Exploitation requires only sending crafted IP packets to the host; no victim user action is needed.\nS:U - Impact is confined to the receiving kernel\u0027s NetLabel/CIPSO processing and memory; there is no VM escape, IOMMU bypass, or other cross-authority boundary crossing.\nC:H - cipso_v4_map_lvl_valid indexes an attacker-controlled u8 into the DOI level array without a size check, enabling a large kernel heap OOB read (up to ~1KB when cipso_size is small). Per guidance, unbounded OOB reads score Confidentiality High.\nI:N - Both defects are out-of-bounds reads with no write, UAF, or control-flow corruption primitive; later map_lvl_ntoh still bounds-checks before applying labels, so there is no integrity impact.\nA:H - The OOB reads can fault on unmapped pages and cause a kernel oops/panic, and a remote attacker can trigger them repeatedly for DoS against CIPSO-enabled hosts."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T08:43:45.278Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/97bc3683c24999ee621d847c9348c75d2fe86272"
        },
        {
          "url": "https://git.kernel.org/stable/c/c61d01faa5550e06794dcf86125ccd325bfad950"
        },
        {
          "url": "https://git.kernel.org/stable/c/dc18101f95fa6e815f426316b8b9a5cee28a334e"
        },
        {
          "url": "https://git.kernel.org/stable/c/1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000"
        },
        {
          "url": "https://git.kernel.org/stable/c/fcfe700acdc1c72eab231300e82b962bac2b2b2c"
        },
        {
          "url": "https://git.kernel.org/stable/c/e3713abc4248aa6bcc11173d754c418b02a62cbb"
        },
        {
          "url": "https://git.kernel.org/stable/c/fbf9578919d6c91100ec63acf2cba641383f6c78"
        },
        {
          "url": "https://git.kernel.org/stable/c/5578de4834fe0f2a34fedc7374be691443396d1f"
        }
      ],
      "title": "netlabel: fix out-of-bounds memory accesses",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2019-25160",
    "datePublished": "2024-02-26T17:20:19.490Z",
    "dateReserved": "2024-02-26T17:07:20.465Z",
    "dateUpdated": "2026-08-05T08:43:45.278Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2019-25160",
      "date": "2026-09-16",
      "epss": "0.00745",
      "percentile": "0.53045"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"2.6.19\", \"versionEndExcluding\": \"3.16.66\", \"matchCriteriaId\": \"5BE81AB9-4B65-4869-90BE-017D91883C73\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"3.17.0\", \"versionEndExcluding\": \"3.18.137\", \"matchCriteriaId\": \"4398F66E-2736-42C0-860F-F7BC4AA499A9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"3.19.0\", \"versionEndExcluding\": \"4.4.177\", \"matchCriteriaId\": \"2B11D0D4-8911-4176-B660-7A31A5A5563F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.5.0\", \"versionEndExcluding\": \"4.9.163\", \"matchCriteriaId\": \"32689183-4840-45C3-B1C1-786F9AA3C37F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.10.0\", \"versionEndExcluding\": \"4.14.106\", \"matchCriteriaId\": \"B0A84CE1-F2C1-45E6-9856-4A5389302236\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.15.0\", \"versionEndExcluding\": \"4.19.28\", \"matchCriteriaId\": \"EAD30F57-73E5-4527-9D5A-A7927304AE6B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.20.0\", \"versionEndExcluding\": \"4.20.15\", \"matchCriteriaId\": \"09B03EF0-9FEB-41ED-8907-3528587B0BF6\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnetlabel: fix out-of-bounds memory accesses\\n\\nThere are two array out-of-bounds memory accesses, one in\\ncipso_v4_map_lvl_valid(), the other in netlbl_bitmap_walk().  Both\\nerrors are embarassingly simple, and the fixes are straightforward.\\n\\nAs a FYI for anyone backporting this patch to kernels prior to v4.8,\\nyou\u0027ll want to apply the netlbl_bitmap_walk() patch to\\ncipso_v4_bitmap_walk() as netlbl_bitmap_walk() doesn\u0027t exist before\\nLinux v4.8.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: netlabel: corrige accesos a memoria fuera de los l\\u00edmites Hay dos accesos a memoria fuera de los l\\u00edmites de matriz, uno en cipso_v4_map_lvl_valid() y el otro en netlbl_bitmap_walk(). Ambos errores son vergonzosamente simples y las soluciones son sencillas. Para su informaci\\u00f3n, cualquiera que est\\u00e9 implementando este parche en kernels anteriores a v4.8, querr\\u00e1 aplicar el parche netlbl_bitmap_walk() a cipso_v4_bitmap_walk() ya que netlbl_bitmap_walk() no existe antes de Linux v4.8.\"}]",
      "id": "CVE-2019-25160",
      "lastModified": "2024-11-21T04:40:00.357",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\", \"baseScore\": 7.1, \"baseSeverity\": \"HIGH\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 5.2}]}",
      "published": "2024-02-26T18:15:06.930",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/5578de4834fe0f2a34fedc7374be691443396d1f\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/97bc3683c24999ee621d847c9348c75d2fe86272\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/c61d01faa5550e06794dcf86125ccd325bfad950\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/dc18101f95fa6e815f426316b8b9a5cee28a334e\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/e3713abc4248aa6bcc11173d754c418b02a62cbb\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/fbf9578919d6c91100ec63acf2cba641383f6c78\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/fcfe700acdc1c72eab231300e82b962bac2b2b2c\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/5578de4834fe0f2a34fedc7374be691443396d1f\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/97bc3683c24999ee621d847c9348c75d2fe86272\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/c61d01faa5550e06794dcf86125ccd325bfad950\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/dc18101f95fa6e815f426316b8b9a5cee28a334e\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/e3713abc4248aa6bcc11173d754c418b02a62cbb\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/fbf9578919d6c91100ec63acf2cba641383f6c78\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/fcfe700acdc1c72eab231300e82b962bac2b2b2c\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-125\"}]}]"
    },
    "microsoft_vex": {
      "current_release_date": "2024-08-15T00:00:00.000Z",
      "cve": "CVE-2019-25160",
      "id": "msrc_CVE-2019-25160",
      "initial_release_date": "2024-02-02T08:00:00.000Z",
      "product_status:fixed": "2",
      "product_status:known_affected": "2",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "netlabel: fix out-of-bounds memory accesses",
      "url": "https://msrc.microsoft.com/csaf/vex/2024/msrc_cve-2019-25160.json",
      "version": "1"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2019-25160\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-02-26T18:15:06.930\",\"lastModified\":\"2026-08-04T10:16:33.017\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnetlabel: fix out-of-bounds memory accesses\\n\\nThere are two array out-of-bounds memory accesses, one in\\ncipso_v4_map_lvl_valid(), the other in netlbl_bitmap_walk().  Both\\nerrors are embarassingly simple, and the fixes are straightforward.\\n\\nAs a FYI for anyone backporting this patch to kernels prior to v4.8,\\nyou\u0027ll want to apply the netlbl_bitmap_walk() patch to\\ncipso_v4_bitmap_walk() as netlbl_bitmap_walk() doesn\u0027t exist before\\nLinux v4.8.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\\n\\nnetlabel: correcci\u00f3n de accesos a memoria fuera de l\u00edmites\\n\\nHay dos accesos a memoria fuera de l\u00edmites de array, uno en cipso_v4_map_lvl_valid(), el otro en netlbl_bitmap_walk(). Ambos errores son vergonzosamente simples, y las correcciones son directas.\\n\\nComo informaci\u00f3n para cualquiera que haga un \u0027backport\u0027 de este parche a kernels anteriores a la v4.8, querr\u00e1n aplicar el parche de netlbl_bitmap_walk() a cipso_v4_bitmap_walk() ya que netlbl_bitmap_walk() no existe antes de Linux v4.8.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/ipv4/cipso_ipv4.c\",\"net/netlabel/netlabel_kapi.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"446fda4f26822b2d42ab3396aafcedf38a9ff2b6\",\"lessThan\":\"97bc3683c24999ee621d847c9348c75d2fe86272\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"446fda4f26822b2d42ab3396aafcedf38a9ff2b6\",\"lessThan\":\"c61d01faa5550e06794dcf86125ccd325bfad950\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"446fda4f26822b2d42ab3396aafcedf38a9ff2b6\",\"lessThan\":\"dc18101f95fa6e815f426316b8b9a5cee28a334e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"446fda4f26822b2d42ab3396aafcedf38a9ff2b6\",\"lessThan\":\"1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"446fda4f26822b2d42ab3396aafcedf38a9ff2b6\",\"lessThan\":\"fcfe700acdc1c72eab231300e82b962bac2b2b2c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"446fda4f26822b2d42ab3396aafcedf38a9ff2b6\",\"lessThan\":\"e3713abc4248aa6bcc11173d754c418b02a62cbb\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"446fda4f26822b2d42ab3396aafcedf38a9ff2b6\",\"lessThan\":\"fbf9578919d6c91100ec63acf2cba641383f6c78\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"446fda4f26822b2d42ab3396aafcedf38a9ff2b6\",\"lessThan\":\"5578de4834fe0f2a34fedc7374be691443396d1f\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/ipv4/cipso_ipv4.c\",\"net/netlabel/netlabel_kapi.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2.6.19\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"2.6.19\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"3.16.66\",\"lessThanOrEqual\":\"3.16.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"3.18.137\",\"lessThanOrEqual\":\"3.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.4.177\",\"lessThanOrEqual\":\"4.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.9.163\",\"lessThanOrEqual\":\"4.9.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.14.106\",\"lessThanOrEqual\":\"4.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.28\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.20.15\",\"lessThanOrEqual\":\"4.20.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H\",\"baseScore\":9.1,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.2},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.2}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-02-27T16:02:54.112450Z\",\"id\":\"CVE-2019-25160\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.6.19\",\"versionEndExcluding\":\"3.16.66\",\"matchCriteriaId\":\"5BE81AB9-4B65-4869-90BE-017D91883C73\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.17.0\",\"versionEndExcluding\":\"3.18.137\",\"matchCriteriaId\":\"4398F66E-2736-42C0-860F-F7BC4AA499A9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.19.0\",\"versionEndExcluding\":\"4.4.177\",\"matchCriteriaId\":\"2B11D0D4-8911-4176-B660-7A31A5A5563F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.5.0\",\"versionEndExcluding\":\"4.9.163\",\"matchCriteriaId\":\"32689183-4840-45C3-B1C1-786F9AA3C37F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.10.0\",\"versionEndExcluding\":\"4.14.106\",\"matchCriteriaId\":\"B0A84CE1-F2C1-45E6-9856-4A5389302236\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.15.0\",\"versionEndExcluding\":\"4.19.28\",\"matchCriteriaId\":\"EAD30F57-73E5-4527-9D5A-A7927304AE6B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20.0\",\"versionEndExcluding\":\"4.20.15\",\"matchCriteriaId\":\"09B03EF0-9FEB-41ED-8907-3528587B0BF6\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/5578de4834fe0f2a34fedc7374be691443396d1f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/97bc3683c24999ee621d847c9348c75d2fe86272\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c61d01faa5550e06794dcf86125ccd325bfad950\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/dc18101f95fa6e815f426316b8b9a5cee28a334e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e3713abc4248aa6bcc11173d754c418b02a62cbb\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fbf9578919d6c91100ec63acf2cba641383f6c78\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fcfe700acdc1c72eab231300e82b962bac2b2b2c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/5578de4834fe0f2a34fedc7374be691443396d1f\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/97bc3683c24999ee621d847c9348c75d2fe86272\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c61d01faa5550e06794dcf86125ccd325bfad950\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/dc18101f95fa6e815f426316b8b9a5cee28a334e\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e3713abc4248aa6bcc11173d754c418b02a62cbb\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fbf9578919d6c91100ec63acf2cba641383f6c78\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fcfe700acdc1c72eab231300e82b962bac2b2b2c\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-04T21:46:21+00:00",
      "cve": "CVE-2019-25160",
      "id": "CVE-2019-25160",
      "initial_release_date": "2019-01-01T00:00:00+00:00",
      "product_status:fixed": "120",
      "product_status:known_affected": "30",
      "product_status:known_not_affected": "136",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: out-of-bounds memory accesses in netlabel",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2019/cve-2019-25160.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-04T00:52:53Z",
      "cve": "CVE-2019-25160",
      "id": "CVE-2019-25160",
      "initial_release_date": "2024-02-28T04:22:04Z",
      "product_status:known_affected": "428",
      "product_status:known_not_affected": "375",
      "product_status:recommended": "118",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2019-25160",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2019-25160.json",
      "version": "57"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/97bc3683c24999ee621d847c9348c75d2fe86272\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/c61d01faa5550e06794dcf86125ccd325bfad950\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/dc18101f95fa6e815f426316b8b9a5cee28a334e\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/fcfe700acdc1c72eab231300e82b962bac2b2b2c\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/e3713abc4248aa6bcc11173d754c418b02a62cbb\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/fbf9578919d6c91100ec63acf2cba641383f6c78\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/5578de4834fe0f2a34fedc7374be691443396d1f\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-05T03:00:19.401Z\"}}, {\"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2019-25160\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-02-27T16:02:54.112450Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-05-23T19:01:13.408Z\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"title\": \"netlabel: fix out-of-bounds memory accesses\", \"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 9.1, \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"AV:N - Crafted IPv4 packets with CIPSO options reach the bug via ip_rcv_finish_core -\u003e ip_rcv_options -\u003e ip_options_compile -\u003e cipso_v4_validate -\u003e cipso_v4_map_lvl_valid/netlbl_bitmap_walk, with no local access required. This is a net/ stack path processing remote peer packet data.\\nAC:L - With a CIPSO MAP_TRANS DOI configured (the labeled-networking deployment this subsystem targets), an attacker reliably triggers the OOB by setting an out-of-range level byte or category bitmap; DOI values are probeable via ICMP parameter-problem offsets. No race or other attacker-uncontrollable condition is required.\\nPR:N - Incoming skbs take the CIPSO path in __ip_options_compile without CAP_NET_RAW or any authentication; the privilege check applies only when skb is NULL (setsockopt). A remote unauthenticated sender can trigger the vulnerable validation.\\nUI:N - Exploitation requires only sending crafted IP packets to the host; no victim user action is needed.\\nS:U - Impact is confined to the receiving kernel\u0027s NetLabel/CIPSO processing and memory; there is no VM escape, IOMMU bypass, or other cross-authority boundary crossing.\\nC:H - cipso_v4_map_lvl_valid indexes an attacker-controlled u8 into the DOI level array without a size check, enabling a large kernel heap OOB read (up to ~1KB when cipso_size is small). Per guidance, unbounded OOB reads score Confidentiality High.\\nI:N - Both defects are out-of-bounds reads with no write, UAF, or control-flow corruption primitive; later map_lvl_ntoh still bounds-checks before applying labels, so there is no integrity impact.\\nA:H - The OOB reads can fault on unmapped pages and cause a kernel oops/panic, and a remote attacker can trigger them repeatedly for DoS against CIPSO-enabled hosts.\"}]}], \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"446fda4f26822b2d42ab3396aafcedf38a9ff2b6\", \"lessThan\": \"97bc3683c24999ee621d847c9348c75d2fe86272\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"446fda4f26822b2d42ab3396aafcedf38a9ff2b6\", \"lessThan\": \"c61d01faa5550e06794dcf86125ccd325bfad950\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"446fda4f26822b2d42ab3396aafcedf38a9ff2b6\", \"lessThan\": \"dc18101f95fa6e815f426316b8b9a5cee28a334e\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"446fda4f26822b2d42ab3396aafcedf38a9ff2b6\", \"lessThan\": \"1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"446fda4f26822b2d42ab3396aafcedf38a9ff2b6\", \"lessThan\": \"fcfe700acdc1c72eab231300e82b962bac2b2b2c\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"446fda4f26822b2d42ab3396aafcedf38a9ff2b6\", \"lessThan\": \"e3713abc4248aa6bcc11173d754c418b02a62cbb\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"446fda4f26822b2d42ab3396aafcedf38a9ff2b6\", \"lessThan\": \"fbf9578919d6c91100ec63acf2cba641383f6c78\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"446fda4f26822b2d42ab3396aafcedf38a9ff2b6\", \"lessThan\": \"5578de4834fe0f2a34fedc7374be691443396d1f\", \"versionType\": \"git\"}], \"programFiles\": [\"net/ipv4/cipso_ipv4.c\", \"net/netlabel/netlabel_kapi.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.6.19\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"2.6.19\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"3.16.66\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"3.16.*\"}, {\"status\": \"unaffected\", \"version\": \"3.18.137\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"3.18.*\"}, {\"status\": \"unaffected\", \"version\": \"4.4.177\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.4.*\"}, {\"status\": \"unaffected\", \"version\": \"4.9.163\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.9.*\"}, {\"status\": \"unaffected\", \"version\": \"4.14.106\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.14.*\"}, {\"status\": \"unaffected\", \"version\": \"4.19.28\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"4.20.15\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.20.*\"}, {\"status\": \"unaffected\", \"version\": \"5.0\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"net/ipv4/cipso_ipv4.c\", \"net/netlabel/netlabel_kapi.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/97bc3683c24999ee621d847c9348c75d2fe86272\"}, {\"url\": \"https://git.kernel.org/stable/c/c61d01faa5550e06794dcf86125ccd325bfad950\"}, {\"url\": \"https://git.kernel.org/stable/c/dc18101f95fa6e815f426316b8b9a5cee28a334e\"}, {\"url\": \"https://git.kernel.org/stable/c/1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000\"}, {\"url\": \"https://git.kernel.org/stable/c/fcfe700acdc1c72eab231300e82b962bac2b2b2c\"}, {\"url\": \"https://git.kernel.org/stable/c/e3713abc4248aa6bcc11173d754c418b02a62cbb\"}, {\"url\": \"https://git.kernel.org/stable/c/fbf9578919d6c91100ec63acf2cba641383f6c78\"}, {\"url\": \"https://git.kernel.org/stable/c/5578de4834fe0f2a34fedc7374be691443396d1f\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnetlabel: fix out-of-bounds memory accesses\\n\\nThere are two array out-of-bounds memory accesses, one in\\ncipso_v4_map_lvl_valid(), the other in netlbl_bitmap_walk().  Both\\nerrors are embarassingly simple, and the fixes are straightforward.\\n\\nAs a FYI for anyone backporting this patch to kernels prior to v4.8,\\nyou\u0027ll want to apply the netlbl_bitmap_walk() patch to\\ncipso_v4_bitmap_walk() as netlbl_bitmap_walk() doesn\u0027t exist before\\nLinux v4.8.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"3.16.66\", \"versionStartIncluding\": \"2.6.19\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"3.18.137\", \"versionStartIncluding\": \"2.6.19\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.4.177\", \"versionStartIncluding\": \"2.6.19\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.9.163\", \"versionStartIncluding\": \"2.6.19\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.14.106\", \"versionStartIncluding\": \"2.6.19\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.28\", \"versionStartIncluding\": \"2.6.19\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.20.15\", \"versionStartIncluding\": \"2.6.19\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.0\", \"versionStartIncluding\": \"2.6.19\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-08-05T08:43:45.278Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2019-25160\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-05T08:43:45.278Z\", \"dateReserved\": \"2024-02-26T17:07:20.465Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-02-26T17:20:19.490Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.