CVE-2019-3900: High severity Linux Linux kernel vulnerability
An infinite loop issue was found in the vhostnet kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handlerx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhostnet kernel thread, resulting in a DoS scenario.
Other sources
An infinite loop issue was found in the vhostnet kernel module while handling incoming packets in handlerx(). The infinite loop could occur if one end sends packets faster than the other end can process them. A guest user, maybe a remote one, could use this flaw to stall the vhostnet kernel thread, resulting in a DoS scenario.
An infinite loop issue was found in the vhostnet kernel module, while handling incoming packets in handlerx(). It could occur if one end sends packets faster than the other end can process them.
A guest user, maybe remote one, could use this flaw to stall the vhostnet kernel thread, resulting in a DoS scenario.
Upstream patch: --------------- -> https://www.spinics.net/lists/kernel/msg3111012.html
Reference: ---------- -> https://www.openwall.com/lists/oss-security/2019/04/25/2
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:2.6.32-754.24.2.el6 - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:3.10.0-1062.rt56.1022.el7 - Upgrade
Upgrade
redhat/kernel-altto a version that resolves this vulnerability.Fixed in 0:4.14.0-115.10.1.el7a - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:3.10.0-1062.el7 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:3.10.0-693.61.1.el7 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:3.10.0-862.44.2.el7 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:3.10.0-957.38.1.el7 - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:4.18.0-147.rt24.93.el8 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:4.18.0-147.el8 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:4.18.0-80.15.1.el8_0 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2019-3900?
CVE-2019-3900 has been assigned a severity rating of high due to the potential for an infinite loop in the vhost_net kernel module.
How do I fix CVE-2019-3900?
To fix CVE-2019-3900, upgrade to the recommended kernel versions listed in your Linux distribution's advisory.
What impact does CVE-2019-3900 have on system performance?
CVE-2019-3900 may cause significant system performance degradation by putting the system into an infinite loop when handling incoming packets.
Is my system vulnerable to CVE-2019-3900?
If your system is running a vulnerable version of the Linux Kernel or vhost_net module up to and including v5.1-rc6, it may be susceptible to CVE-2019-3900.
Can a remote attacker exploit CVE-2019-3900?
Yes, a remote attacker can exploit CVE-2019-3900 by sending packets more quickly than the kernel can process them, potentially leading to denial-of-service.