FKIE_CVE-2019-25160

Vulnerability from fkie_nvd - Published: 2024-02-26 18:15 - Updated: 2026-08-04 10:16
Severity
9.1 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
7.1 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved: netlabel: fix out-of-bounds memory accesses There are two array out-of-bounds memory accesses, one in cipso_v4_map_lvl_valid(), the other in netlbl_bitmap_walk(). Both errors are embarassingly simple, and the fixes are straightforward. As a FYI for anyone backporting this patch to kernels prior to v4.8, you'll want to apply the netlbl_bitmap_walk() patch to cipso_v4_bitmap_walk() as netlbl_bitmap_walk() doesn't exist before Linux v4.8.
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5578de4834fe0f2a34fedc7374be691443396d1fPatch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/97bc3683c24999ee621d847c9348c75d2fe86272Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c61d01faa5550e06794dcf86125ccd325bfad950Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/dc18101f95fa6e815f426316b8b9a5cee28a334ePatch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e3713abc4248aa6bcc11173d754c418b02a62cbbPatch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/fbf9578919d6c91100ec63acf2cba641383f6c78Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/fcfe700acdc1c72eab231300e82b962bac2b2b2cPatch
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000Patch
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/5578de4834fe0f2a34fedc7374be691443396d1fPatch
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/97bc3683c24999ee621d847c9348c75d2fe86272Patch
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/c61d01faa5550e06794dcf86125ccd325bfad950Patch
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/dc18101f95fa6e815f426316b8b9a5cee28a334ePatch
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/e3713abc4248aa6bcc11173d754c418b02a62cbbPatch
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/fbf9578919d6c91100ec63acf2cba641383f6c78Patch
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/fcfe700acdc1c72eab231300e82b962bac2b2b2cPatch
Impacted products
Vendor Product Version
linux linux_kernel *
linux linux_kernel *
linux linux_kernel *
linux linux_kernel *
linux linux_kernel *
linux linux_kernel *
linux linux_kernel *
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ipv4/cipso_ipv4.c",
            "net/netlabel/netlabel_kapi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "97bc3683c24999ee621d847c9348c75d2fe86272",
              "status": "affected",
              "version": "446fda4f26822b2d42ab3396aafcedf38a9ff2b6",
              "versionType": "git"
            },
            {
              "lessThan": "c61d01faa5550e06794dcf86125ccd325bfad950",
              "status": "affected",
              "version": "446fda4f26822b2d42ab3396aafcedf38a9ff2b6",
              "versionType": "git"
            },
            {
              "lessThan": "dc18101f95fa6e815f426316b8b9a5cee28a334e",
              "status": "affected",
              "version": "446fda4f26822b2d42ab3396aafcedf38a9ff2b6",
              "versionType": "git"
            },
            {
              "lessThan": "1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000",
              "status": "affected",
              "version": "446fda4f26822b2d42ab3396aafcedf38a9ff2b6",
              "versionType": "git"
            },
            {
              "lessThan": "fcfe700acdc1c72eab231300e82b962bac2b2b2c",
              "status": "affected",
              "version": "446fda4f26822b2d42ab3396aafcedf38a9ff2b6",
              "versionType": "git"
            },
            {
              "lessThan": "e3713abc4248aa6bcc11173d754c418b02a62cbb",
              "status": "affected",
              "version": "446fda4f26822b2d42ab3396aafcedf38a9ff2b6",
              "versionType": "git"
            },
            {
              "lessThan": "fbf9578919d6c91100ec63acf2cba641383f6c78",
              "status": "affected",
              "version": "446fda4f26822b2d42ab3396aafcedf38a9ff2b6",
              "versionType": "git"
            },
            {
              "lessThan": "5578de4834fe0f2a34fedc7374be691443396d1f",
              "status": "affected",
              "version": "446fda4f26822b2d42ab3396aafcedf38a9ff2b6",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ipv4/cipso_ipv4.c",
            "net/netlabel/netlabel_kapi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.19"
            },
            {
              "lessThan": "2.6.19",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "3.16.*",
              "status": "unaffected",
              "version": "3.16.66",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "3.18.*",
              "status": "unaffected",
              "version": "3.18.137",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.4.*",
              "status": "unaffected",
              "version": "4.4.177",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.163",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.106",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.28",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.20.*",
              "status": "unaffected",
              "version": "4.20.15",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5BE81AB9-4B65-4869-90BE-017D91883C73",
              "versionEndExcluding": "3.16.66",
              "versionStartIncluding": "2.6.19",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4398F66E-2736-42C0-860F-F7BC4AA499A9",
              "versionEndExcluding": "3.18.137",
              "versionStartIncluding": "3.17.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2B11D0D4-8911-4176-B660-7A31A5A5563F",
              "versionEndExcluding": "4.4.177",
              "versionStartIncluding": "3.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "32689183-4840-45C3-B1C1-786F9AA3C37F",
              "versionEndExcluding": "4.9.163",
              "versionStartIncluding": "4.5.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B0A84CE1-F2C1-45E6-9856-4A5389302236",
              "versionEndExcluding": "4.14.106",
              "versionStartIncluding": "4.10.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EAD30F57-73E5-4527-9D5A-A7927304AE6B",
              "versionEndExcluding": "4.19.28",
              "versionStartIncluding": "4.15.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "09B03EF0-9FEB-41ED-8907-3528587B0BF6",
              "versionEndExcluding": "4.20.15",
              "versionStartIncluding": "4.20.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetlabel: fix out-of-bounds memory accesses\n\nThere are two array out-of-bounds memory accesses, one in\ncipso_v4_map_lvl_valid(), the other in netlbl_bitmap_walk().  Both\nerrors are embarassingly simple, and the fixes are straightforward.\n\nAs a FYI for anyone backporting this patch to kernels prior to v4.8,\nyou\u0027ll want to apply the netlbl_bitmap_walk() patch to\ncipso_v4_bitmap_walk() as netlbl_bitmap_walk() doesn\u0027t exist before\nLinux v4.8."
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnetlabel: correcci\u00f3n de accesos a memoria fuera de l\u00edmites\n\nHay dos accesos a memoria fuera de l\u00edmites de array, uno en cipso_v4_map_lvl_valid(), el otro en netlbl_bitmap_walk(). Ambos errores son vergonzosamente simples, y las correcciones son directas.\n\nComo informaci\u00f3n para cualquiera que haga un \u0027backport\u0027 de este parche a kernels anteriores a la v4.8, querr\u00e1n aplicar el parche de netlbl_bitmap_walk() a cipso_v4_bitmap_walk() ya que netlbl_bitmap_walk() no existe antes de Linux v4.8."
    }
  ],
  "id": "CVE-2019-25160",
  "lastModified": "2026-08-04T10:16:33.017",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.1,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.2,
        "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.1,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.2,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2019-25160",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-02-27T16:02:54.112450Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2024-02-26T18:15:06.930",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/5578de4834fe0f2a34fedc7374be691443396d1f"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/97bc3683c24999ee621d847c9348c75d2fe86272"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/c61d01faa5550e06794dcf86125ccd325bfad950"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/dc18101f95fa6e815f426316b8b9a5cee28a334e"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/e3713abc4248aa6bcc11173d754c418b02a62cbb"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/fbf9578919d6c91100ec63acf2cba641383f6c78"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/fcfe700acdc1c72eab231300e82b962bac2b2b2c"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/5578de4834fe0f2a34fedc7374be691443396d1f"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/97bc3683c24999ee621d847c9348c75d2fe86272"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/c61d01faa5550e06794dcf86125ccd325bfad950"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/dc18101f95fa6e815f426316b8b9a5cee28a334e"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/e3713abc4248aa6bcc11173d754c418b02a62cbb"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/fbf9578919d6c91100ec63acf2cba641383f6c78"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/fcfe700acdc1c72eab231300e82b962bac2b2b2c"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-125"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.