CVE-2019-3837

MEDIUM Year: 2019
CVSS v3 Score
6.1
Medium
CVSS v2 Score
4.9
Medium
Weakness Type
CWE-362
View all →

Vulnerability Description

It was found that the net_dma code in tcp_recvmsg() in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded userspace application calling recvmsg() for the same network socket in parallel executed on ioatdma-enabled hardware with net_dma enabled can leak the memory, crash the host leading to a denial-of-service or cause a random memory corruption.

Related Vulnerabilities

CVE-2018-0480

MEDIUM
CVSS:6.1(Medium)

A vulnerability in the errdisable per VLAN feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause the device to crash, leading to a denial of service (DoS) conditi...

CWE-3622018

CVE-2019-18567

MEDIUM
CVSS:6.1(Medium)

Bromium client version 4.0.3.2060 and prior to 4.1.7 Update 1 has an out of bound read results in race condition causing Kernel memory leaks or denial of service.

CWE-3622019

CVE-2024-35899

MEDIUM
CVSS:6.1(Medium)

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: flush pending destroy work before exit_net release Similar to 2c9f0293280e ("netfilter: nf_tables: flush pendi...

CWE-3622024

CVE-2024-40887

MEDIUM
CVSS:6.1(Medium)

Race condition in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent...

CWE-3622024

CVE-2025-20119

MEDIUM
CVSS:6.0(Medium)

A vulnerability in the system file permission handling of Cisco APIC could allow an authenticated, local attacker to overwrite critical system files, which could cause a DoS condition. To exploit this...

CWE-3622025

CVE-2015-8767

MEDIUM
CVSS:6.2(Medium)

net/sctp/sm_sideeffect.c in the Linux kernel before 4.3 does not properly manage the relationship between a lock and a socket, which allows local users to cause a denial of service (deadlock) via a cr...

CWE-3622015