Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2019-25160 Details

Description

In the Linux kernel, the following vulnerability has been resolved: netlabel: fix out-of-bounds memory accesses There are two array out-of-bounds memory accesses, one in cipso_v4_map_lvl_valid(), the other in netlbl_bitmap_walk(). Both errors are embarassingly simple, and the fixes are straightforward. As a FYI for anyone backporting this patch to kernels prior to v4.8, you'll want to apply the netlbl_bitmap_walk() patch to cipso_v4_bitmap_walk() as netlbl_bitmap_walk() doesn't exist before Linux v4.8.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.1 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CNA: kernel.orgCVSS-B:9.1 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000	kernel.org	Patch
https://git.kernel.org/stable/c/5578de4834fe0f2a34fedc7374be691443396d1f	kernel.org	Patch
https://git.kernel.org/stable/c/97bc3683c24999ee621d847c9348c75d2fe86272	kernel.org	Patch
https://git.kernel.org/stable/c/c61d01faa5550e06794dcf86125ccd325bfad950	kernel.org	Patch
https://git.kernel.org/stable/c/dc18101f95fa6e815f426316b8b9a5cee28a334e	kernel.org	Patch
https://git.kernel.org/stable/c/e3713abc4248aa6bcc11173d754c418b02a62cbb	kernel.org	Patch
https://git.kernel.org/stable/c/fbf9578919d6c91100ec63acf2cba641383f6c78	kernel.org	Patch
https://git.kernel.org/stable/c/fcfe700acdc1c72eab231300e82b962bac2b2b2c	kernel.org	Patch
https://git.kernel.org/stable/c/1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000	CVE	Patch
https://git.kernel.org/stable/c/5578de4834fe0f2a34fedc7374be691443396d1f	CVE	Patch
https://git.kernel.org/stable/c/97bc3683c24999ee621d847c9348c75d2fe86272	CVE	Patch
https://git.kernel.org/stable/c/c61d01faa5550e06794dcf86125ccd325bfad950	CVE	Patch
https://git.kernel.org/stable/c/dc18101f95fa6e815f426316b8b9a5cee28a334e	CVE	Patch
https://git.kernel.org/stable/c/e3713abc4248aa6bcc11173d754c418b02a62cbb	CVE	Patch
https://git.kernel.org/stable/c/fbf9578919d6c91100ec63acf2cba641383f6c78	CVE	Patch
https://git.kernel.org/stable/c/fcfe700acdc1c72eab231300e82b962bac2b2b2c	CVE	Patch

see all 16 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-125	Out-of-bounds Read	[email protected]

Affected Products

Product	Versions
linux linux kernel	>= 2.6.19, < 3.16.66 >= 3.17.0, < 3.18.137 >= 3.19.0, < 4.4.177 >= 4.5.0, < 4.9.163 >= 4.10.0, < 4.14.106
CPE cpe:2.3:o:linux:linux_kernel:::::::: Remediation No remediation found in references.

Change History

8 change records found show changes

Date	Action	Recorded By
Aug 4, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	CISA-ADP
Jun 17, 2026	CVE Modified	kernel.org
Nov 21, 2024	CVE Modified	CVE
May 28, 2024	CVE Modified	kernel.org
May 14, 2024	CVE Modified	kernel.org
Apr 17, 2024	Initial Analysis	[email protected]
Feb 26, 2024	New CVE Received	kernel.org