K04107324 : Linux kernel vulnerability CVE-2019-3900

Security Advisory Description

An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario. (CVE-2019-3900)

Impact

An attacker may cause a denial-of-service (DoS) that results in a traffic disruption. This issue affects only BIG-IP platforms with Virtual Clustered Multiprocessing (vCMP) guests. This issue does not affect BIG-IP Virtual Edition (VE) or single-instance appliances. BIG-IP vCMP systems are vulnerable regardless of their configuration or deployed modules.