Description
An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Red Hat Kernel
affects up to and including v5.1-rc6affected
References
- http://www.securityfocus.com/bid/108076 ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TOFNJA5NNVXQ6AV6KGZB677JIVXAMJHT/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AYTZH6QCNITK7353S6RCRT2PQHZSDPXD/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RI3WXXM5URTZSR3RVEKO6MDXDFIKTZ5R/ ↗
- https://access.redhat.com/errata/RHSA-2019:1973 ↗
- https://access.redhat.com/errata/RHSA-2019:2043 ↗
- https://access.redhat.com/errata/RHSA-2019:2029 ↗
- https://seclists.org/bugtraq/2019/Aug/18 ↗
- https://www.debian.org/security/2019/dsa-4497 ↗
- https://lists.debian.org/debian-lts-announce/2019/08/msg00016.html ↗
- https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html ↗
- https://usn.ubuntu.com/4117-1/ ↗
- https://usn.ubuntu.com/4114-1/ ↗
- https://usn.ubuntu.com/4115-1/ ↗
- https://usn.ubuntu.com/4116-1/ ↗
- https://usn.ubuntu.com/4118-1/ ↗
- https://access.redhat.com/errata/RHSA-2019:3220 ↗
- https://access.redhat.com/errata/RHSA-2019:3309 ↗
- https://access.redhat.com/errata/RHSA-2019:3517 ↗
- https://seclists.org/bugtraq/2019/Nov/11 ↗
- https://access.redhat.com/errata/RHSA-2019:3836 ↗
- https://access.redhat.com/errata/RHSA-2019:3967 ↗
- https://access.redhat.com/errata/RHSA-2019:4058 ↗
- https://access.redhat.com/errata/RHSA-2020:0204 ↗
- https://security.netapp.com/advisory/ntap-20190517-0005/ ↗
- https://www.oracle.com/security-alerts/cpuApr2021.html ↗
- http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3900 ↗
- https://www.spinics.net/lists/kernel/msg3111012.html ↗