High severity7.8NVD Advisory· Published Sep 4, 2019· Updated Jun 17, 2026

CVE-2019-15918

Description

An issue was discovered in the Linux kernel before 5.0.10. SMB2_negotiate in fs/cifs/smb2pdu.c has an out-of-bounds read because data structures are incompletely updated after a change from smb30 to smb21.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Linux/Linux kerneldescription
Linux/Kernel2 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=4.13.5,<4.14.166
- (no CPE)range: <5.0.10
Canonical/Ubuntu Linux3 versions
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*+ 2 more
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

Patches

Vulnerability mechanics

References

github.com/torvalds/linux/commit/b57a55e2200ede754e4dc9cce4ba9402544b9365nvdPatchThird Party Advisory
cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10nvdRelease NotesVendor Advisory
security.netapp.com/advisory/ntap-20191004-0001/nvdThird Party Advisory
usn.ubuntu.com/4162-1/nvdThird Party Advisory
usn.ubuntu.com/4162-2/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000