CVE Vulnerabilities

CVE-2019-3900

Loop with Unreachable Exit Condition ('Infinite Loop')

Published: Apr 25, 2019 | Modified: Feb 12, 2023
CVSS 3.x
7.7
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS 2.x
6.8 MEDIUM
AV:N/AC:L/Au:S/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu

An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario.

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Software

Name Vendor Start Version End Version
Linux_kernel Linux * 5.1 (excluding)
Linux_kernel Linux 5.1-rc1 (including) 5.1-rc1 (including)
Linux_kernel Linux 5.1-rc2 (including) 5.1-rc2 (including)
Linux_kernel Linux 5.1-rc3 (including) 5.1-rc3 (including)
Linux_kernel Linux 5.1-rc4 (including) 5.1-rc4 (including)
Linux_kernel Linux 5.1-rc5 (including) 5.1-rc5 (including)
Linux_kernel Linux 5.1-rc6 (including) 5.1-rc6 (including)

References