NetSight
IP …
high7.7

CVE-2019-3900

An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx().

Impact

An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.34 before 3.16.72
from 3.17 before 4.4.191
from 4.5 before 4.9.190
from 4.10 before 4.14.133
from 4.15 before 4.19.64
from 4.20 before 5.2
FedoraprojectFedora
Versions 29, 30, 28
RedhatEnterprise Linux
Versions 6.0, 7.0
DebianDebian Linux
Versions 8.0, 9.0, 10.0
CanonicalUbuntu Linux
Versions 16.04, 18.04, 19.04
NetappActive Iq Unified Manager For Vmware Vsphere
from 9.5
NetappHci Management Node
All versions
NetappSnapprotect
All versions
NetappSolidfire
All versions
NetappStorage Replication Adapter For Clustered Data Ontap For Vmware Vsphere
from 7.2
NetappVasa Provider For Clustered Data Ontap
from 7.2
NetappVirtual Storage Console For Vmware Vsphere
from 7.2

Weakness classification

CWE-835

References