CVE - CVE-2019-25160

CVE-ID
CVE-2019-25160	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: netlabel: fix out-of-bounds memory accesses There are two array out-of-bounds memory accesses, one in cipso_v4_map_lvl_valid(), the other in netlbl_bitmap_walk(). Both errors are embarassingly simple, and the fixes are straightforward. As a FYI for anyone backporting this patch to kernels prior to v4.8, you'll want to apply the netlbl_bitmap_walk() patch to cipso_v4_bitmap_walk() as netlbl_bitmap_walk() doesn't exist before Linux v4.8.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000 URL:https://git.kernel.org/stable/c/1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000 MISC:https://git.kernel.org/stable/c/5578de4834fe0f2a34fedc7374be691443396d1f URL:https://git.kernel.org/stable/c/5578de4834fe0f2a34fedc7374be691443396d1f MISC:https://git.kernel.org/stable/c/97bc3683c24999ee621d847c9348c75d2fe86272 URL:https://git.kernel.org/stable/c/97bc3683c24999ee621d847c9348c75d2fe86272 MISC:https://git.kernel.org/stable/c/c61d01faa5550e06794dcf86125ccd325bfad950 URL:https://git.kernel.org/stable/c/c61d01faa5550e06794dcf86125ccd325bfad950 MISC:https://git.kernel.org/stable/c/dc18101f95fa6e815f426316b8b9a5cee28a334e URL:https://git.kernel.org/stable/c/dc18101f95fa6e815f426316b8b9a5cee28a334e MISC:https://git.kernel.org/stable/c/e3713abc4248aa6bcc11173d754c418b02a62cbb URL:https://git.kernel.org/stable/c/e3713abc4248aa6bcc11173d754c418b02a62cbb MISC:https://git.kernel.org/stable/c/fbf9578919d6c91100ec63acf2cba641383f6c78 URL:https://git.kernel.org/stable/c/fbf9578919d6c91100ec63acf2cba641383f6c78 MISC:https://git.kernel.org/stable/c/fcfe700acdc1c72eab231300e82b962bac2b2b2c URL:https://git.kernel.org/stable/c/fcfe700acdc1c72eab231300e82b962bac2b2b2c
Assigning CNA
kernel.org
Date Record Created
20240226	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240226)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)