CVE-2019-3900
—CVSS 3.1
7.7 high
EPSS
4%p91
Published
()
Modified
Description
An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario.
- Vendors
- linuxfedoraprojectredhatdebiancanonicalnetapporacle
- Products
- linux kernel, fedora, enterprise linux, debian linux, ubuntu linux, active iq unified manager for vmware vsphere, hci management node, snapprotect, solidfire, storage replication adapter for clustered data ontap for vmware vsphere, vasa provider for clustered data ontap, virtual storage console for vmware vsphere
- Weakness
- CWE-835
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
In the news0 stories
No ingested article mentions this CVE yet.