CVE-2019-3900 Denial of service in Kernel
A guest user can cause a denial of service by triggering an infinite loop in the vhost_net kernel module when packet processing is imbalanced.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-3900?
CVE-2019-3900 is a medium-severity denial of service vulnerability in Canonical Ubuntu Linux, published on 25 Apr 2019. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario.
Weakness: CWE-835
Which versions are affected by CVE-2019-3900?
It affects 14 products.
Linux distribution packages (20)
kernel Red Hat:enterprise_linux:7::server | All versions | 0:4.14.0-115.10.1.el7a |
kernel-abi-whitelists Red Hat:enterprise_linux:7::server | All versions | 0:4.14.0-115.10.1.el7a |
kernel-alt Red Hat:enterprise_linux:7::server | All versions | 0:4.14.0-115.10.1.el7a |
kernel-bootwrapper Red Hat:enterprise_linux:7::server | All versions | 0:4.14.0-115.10.1.el7a |
kernel-debug Red Hat:enterprise_linux:7::server | All versions | 0:4.14.0-115.10.1.el7a |
kernel-debug-debuginfo Red Hat:enterprise_linux:7::server | All versions | 0:4.14.0-115.10.1.el7a |
kernel-debug-devel Red Hat:enterprise_linux:7::server | All versions | 0:4.14.0-115.10.1.el7a |
kernel-debuginfo Red Hat:enterprise_linux:7::server | All versions | 0:4.14.0-115.10.1.el7a |
kernel-debuginfo-common-ppc64le Red Hat:enterprise_linux:7::server | All versions | 0:4.14.0-115.10.1.el7a |
kernel-devel Red Hat:enterprise_linux:7::server | All versions | 0:4.14.0-115.10.1.el7a |
kernel-doc Red Hat:enterprise_linux:7::server | All versions | 0:4.14.0-115.10.1.el7a |
kernel-headers Red Hat:enterprise_linux:7::server | All versions | 0:4.14.0-115.10.1.el7a |
kernel-tools Red Hat:enterprise_linux:7::server | All versions | 0:4.14.0-115.10.1.el7a |
kernel-tools-debuginfo Red Hat:enterprise_linux:7::server | All versions | 0:4.14.0-115.10.1.el7a |
kernel-tools-libs Red Hat:enterprise_linux:7::server | All versions | 0:4.14.0-115.10.1.el7a |
kernel-tools-libs-devel Red Hat:enterprise_linux:7::server | All versions | 0:4.14.0-115.10.1.el7a |
perf Red Hat:enterprise_linux:7::server | All versions | 0:4.14.0-115.10.1.el7a |
perf-debuginfo Red Hat:enterprise_linux:7::server | All versions | 0:4.14.0-115.10.1.el7a |
python-perf Red Hat:enterprise_linux:7::server | All versions | 0:4.14.0-115.10.1.el7a |
python-perf-debuginfo Red Hat:enterprise_linux:7::server | All versions | 0:4.14.0-115.10.1.el7a |
Products include Canonical Ubuntu Linux, Debian Debian Linux, Fedoraproject Fedora, Linux kernel, Netapp Active Iq Unified Manager for Vmware Vsphere, Netapp Cn1610 Firmware and 8 more.
How do I fix CVE-2019-3900?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2019-3900 being exploited?
There is no known exploitation of CVE-2019-3900 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as DEBIAN-CVE-2019-3900, GHSA-h25g-v6rp-rj4h, RHSA-2019:1973, UBUNTU-CVE-2019-3900.