Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.8
CVE-2019-16413: Linux kernel 9p file system may freeze servers
CVE-2019-16413 · published 7 years ago
Summary
The Linux kernel versions before 5.0.4 have a problem in the 9p file system that can cause an endless loop, leading to a denial of service on multi‑processor machines. This may make the affected systems become unresponsive. Update the kernel to version 5.0.4 or later, or apply the vendor's security patch, to prevent the issue.
What to do
- Update canonical linux-aws to version 4.4.0-1044.47.
- Update canonical linux-lts-xenial to version 4.4.0-148.174~14.04.1.
- Update canonical linux-azure to version 4.15.0-1059.64~14.04.1.
- Update canonical linux to version 4.4.0-148.174.
- Update canonical linux-aws to version 4.4.0-1083.93.
- Update canonical linux-aws-hwe to version 4.15.0-1047.49~16.04.1.
- Update canonical linux-azure to version 4.15.0-1056.61.
- Update canonical linux-gcp to version 4.15.0-1041.43.
- Update canonical linux-hwe to version 4.15.0-60.67~16.04.1.
- Update canonical linux-kvm to version 4.4.0-1046.52.
- Update canonical linux-oracle to version 4.15.0-1022.25~16.04.1.
- Update canonical linux-raspi2 to version 4.4.0-1107.115.
- Update canonical linux-snapdragon to version 4.4.0-1111.116.
- Update canonical linux-fips to version 4.4.0-1008.10.
- Update canonical linux to version 4.15.0-60.67.
- Update canonical linux-aws to version 4.15.0-1047.49.
- Update canonical linux-azure to version 5.0.0-1014.14~18.04.1.
- Update canonical linux-gcp to version 4.15.0-1042.45.
- Update canonical linux-gke-4.15 to version 4.15.0-1041.43.
- Update canonical linux-hwe to version 5.0.0-23.24~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1043.43.
- Update canonical linux-oem to version 4.15.0-1056.65.
- Update canonical linux-oracle to version 4.15.0-1022.25.
- Update canonical linux-raspi2 to version 4.15.0-1044.47.
- Update canonical linux-snapdragon to version 4.15.0-1062.69.
- Update canonical linux-aws-fips to version 4.15.0-2018.18.
- Update canonical linux-azure-fips to version 4.15.0-2006.7.
- Update debian linux to version 4.19.37-1.
- Update linux linux_kernel to version 5.0.4 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:14.04:LTS | canonical | linux-aws |
< 4.4.0-1044.47 Fix: upgrade to 4.4.0-1044.47
|
| Ubuntu:14.04:LTS | canonical | linux-lts-xenial |
< 4.4.0-148.174~14.04.1 Fix: upgrade to 4.4.0-148.174~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1059.64~14.04.1 Fix: upgrade to 4.15.0-1059.64~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:16.04:LTS | canonical | linux |
< 4.4.0-148.174 Fix: upgrade to 4.4.0-148.174
|
| Ubuntu:16.04:LTS | canonical | linux-aws |
< 4.4.0-1083.93 Fix: upgrade to 4.4.0-1083.93
|
| Ubuntu:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1047.49~16.04.1 Fix: upgrade to 4.15.0-1047.49~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-azure |
< 4.15.0-1056.61 Fix: upgrade to 4.15.0-1056.61
|
| Ubuntu:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1041.43 Fix: upgrade to 4.15.0-1041.43
|
| Ubuntu:16.04:LTS | canonical | linux-hwe |
< 4.15.0-60.67~16.04.1 Fix: upgrade to 4.15.0-60.67~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-kvm |
< 4.4.0-1046.52 Fix: upgrade to 4.4.0-1046.52
|
| Ubuntu:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1022.25~16.04.1 Fix: upgrade to 4.15.0-1022.25~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-raspi2 |
< 4.4.0-1107.115 Fix: upgrade to 4.4.0-1107.115
|
| Ubuntu:16.04:LTS | canonical | linux-snapdragon |
< 4.4.0-1111.116 Fix: upgrade to 4.4.0-1111.116
|
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips |
< 4.4.0-1008.10 Fix: upgrade to 4.4.0-1008.10
|
| Ubuntu:18.04:LTS | canonical | linux |
< 4.15.0-60.67 Fix: upgrade to 4.15.0-60.67
|
| Ubuntu:18.04:LTS | canonical | linux-aws |
< 4.15.0-1047.49 Fix: upgrade to 4.15.0-1047.49
|
| Ubuntu:18.04:LTS | canonical | linux-azure |
< 5.0.0-1014.14~18.04.1 Fix: upgrade to 5.0.0-1014.14~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gcp |
< 4.15.0-1042.45 Fix: upgrade to 4.15.0-1042.45
|
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 |
< 4.15.0-1041.43 Fix: upgrade to 4.15.0-1041.43
|
| Ubuntu:18.04:LTS | canonical | linux-hwe |
< 5.0.0-23.24~18.04.1 Fix: upgrade to 5.0.0-23.24~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1043.43 Fix: upgrade to 4.15.0-1043.43
|
| Ubuntu:18.04:LTS | canonical | linux-oem |
< 4.15.0-1056.65 Fix: upgrade to 4.15.0-1056.65
|
| Ubuntu:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1022.25 Fix: upgrade to 4.15.0-1022.25
|
| Ubuntu:18.04:LTS | canonical | linux-raspi2 |
< 4.15.0-1044.47 Fix: upgrade to 4.15.0-1044.47
|
| Ubuntu:18.04:LTS | canonical | linux-snapdragon |
< 4.15.0-1062.69 Fix: upgrade to 4.15.0-1062.69
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2018.18 Fix: upgrade to 4.15.0-2018.18
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2006.7 Fix: upgrade to 4.15.0-2006.7
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:26.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:26.04:LTS | canonical | linux-nvidia-bos | All versions |
| Debian:12 | debian | linux |
< 4.19.37-1 Fix: upgrade to 4.19.37-1
|
| – | linux | linux_kernel |
< 5.0.4 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
Original advisory text
An issue was discovered in the Linux kernel before 5.0.4. The 9p filesystem did not protect i_size_write() properly, which causes an i_size_read() infinite loop and denial of service on SMP systems.
An issue was discovered in the Linux kernel before 5.0.4. The 9p filesystem did not protect i_size_write() properly, which causes an i_size_read() infinite loop and denial of service on SMP systems.
References
- https://ubuntu.com/security/CVE-2019-16413 Third Party Advisory
- https://git.kernel.org/linus/5e3cc1ee1405a7eb3487ed24f786dec01b4cbe1f Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2019-16413 Third Party Advisory
- https://patchwork.kernel.org/patch/10753365/ Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2019-16413 Vendor Advisory
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.4 Third Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5e... Third Party Advisory
- https://security.netapp.com/advisory/ntap-20191004-0001/
- https://support.f5.com/csp/article/K43239141?utm_source=f5support&%3Butm_medi...
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Severity
6.8
Medium
Type
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')
Timeline
Published19 Sep 2019
Updated31 Oct 2026
First seen2 Jul 2026
Track software like this
Free during beta