CVE-2019-16413
published 2019-09-19CVE-2019-16413: An issue was discovered in the Linux kernel before 5.0.4. The 9p filesystem did not protect i_size_write() properly, which causes an i_size_read() infinite…
PriorityP335high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
2.90%
85.5th percentile
An issue was discovered in the Linux kernel before 5.0.4. The 9p filesystem did not protect i_size_write() properly, which causes an i_size_read() infinite loop and denial of service on SMP systems.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 4.19.37-1 (bookworm) | linux 4.19.37-1 (bookworm) |
| linux | linux_kernel | < 5.0.4 | 5.0.4 |
| linux | linux_kernel | >= 0 < 4.19.37-1 | 4.19.37-1 |
| linux | linux_kernel | >= 0 < 4.19.37-1 | 4.19.37-1 |
| linux | linux_kernel | >= 0 < 4.19.37-1 | 4.19.37-1 |
| linux | linux_kernel | >= 0 < 4.19.37-1 | 4.19.37-1 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: i_size_read() infinite loop leads to denial of service
vendor_redhat·2019-09-18·CVSS 7.5
CVE-2019-16413 [HIGH] CWE-835 kernel: i_size_read() infinite loop leads to denial of service
kernel: i_size_read() infinite loop leads to denial of service
An issue was discovered in the Linux kernel before 5.0.4. The 9p filesystem did not protect i_size_write() properly, which causes an i_size_read() infinite loop and denial of service on SMP systems.
A flaw was found in the implementation of the 9p filesystem in the Linux kernel. The 9p filesystem does not protect i_size_write() properly, which causes an i_size_read() infinite loop. An attacker, able to mount a specially crafted filesystem, could cause a denial of service on SMP systems.
Mitigation: As the 9p module will be auto-loaded when required, its use can be disabled by preventing the module from loading with the following instructions:
# echo "install 9p /bin/true" >> /etc/modprobe.d/disable-9p.conf
The system will ne
Debian
CVE-2019-16413: linux - An issue was discovered in the Linux kernel before 5.0.4. The 9p filesystem did ...
vendor_debian·2019·CVSS 7.5
CVE-2019-16413 [HIGH] CVE-2019-16413: linux - An issue was discovered in the Linux kernel before 5.0.4. The 9p filesystem did ...
An issue was discovered in the Linux kernel before 5.0.4. The 9p filesystem did not protect i_size_write() properly, which causes an i_size_read() infinite loop and denial of service on SMP systems.
Scope: local
bookworm: resolved (fixed in 4.19.37-1)
bullseye: resolved (fixed in 4.19.37-1)
forky: resolved (fixed in 4.19.37-1)
sid: resolved (fixed in 4.19.37-1)
trixie: resolved (fixed in 4.19.37-1)
GHSA
GHSA-6rqj-653c-2r5w: An issue was discovered in the Linux kernel before 5
ghsa_unreviewed·2022-05-24
CVE-2019-16413 [MEDIUM] GHSA-6rqj-653c-2r5w: An issue was discovered in the Linux kernel before 5
An issue was discovered in the Linux kernel before 5.0.4. The 9p filesystem did not protect i_size_write() properly, which causes an i_size_read() infinite loop and denial of service on SMP systems.
OSV
CVE-2019-16413: An issue was discovered in the Linux kernel before 5
osv·2019-09-19·CVSS 7.5
CVE-2019-16413 [HIGH] CVE-2019-16413: An issue was discovered in the Linux kernel before 5
An issue was discovered in the Linux kernel before 5.0.4. The 9p filesystem did not protect i_size_write() properly, which causes an i_size_read() infinite loop and denial of service on SMP systems.
No detection rules found.
No public exploits indexed.
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.4https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5e3cc1ee1405a7eb3487ed24f786dec01b4cbe1fhttps://patchwork.kernel.org/patch/10753365/https://security.netapp.com/advisory/ntap-20191004-0001/https://support.f5.com/csp/article/K43239141?utm_source=f5support&%3Butm_medium=RSShttps://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.4https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5e3cc1ee1405a7eb3487ed24f786dec01b4cbe1fhttps://patchwork.kernel.org/patch/10753365/https://security.netapp.com/advisory/ntap-20191004-0001/https://support.f5.com/csp/article/K43239141?utm_source=f5support&%3Butm_medium=RSS
2019-09-19
Published