vulnerability

Red Hat OpenShift: CVE-2019-15666: kernel: out-of-bounds array access in __xfrm_policy_unlink

Severity
5
CVSS
(AV:L/AC:L/Au:N/C:N/I:N/A:C)
Published
Aug 27, 2019
Added
Dec 29, 2020
Modified
Apr 11, 2025

Description

An issue was discovered in the Linux kernel before 5.0.19. There is an out-of-bounds array access in __xfrm_policy_unlink, which will cause denial of service, because verify_newpolicy_info in net/xfrm/xfrm_user.c mishandles directory validation.

Solution

linuxrpm-upgrade-redhat-coreos
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.