Medium severity6.5NVD Advisory· Published Mar 25, 2019· Updated Jun 17, 2026

CVE-2019-3874

Description

The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

126

NetApp/Active Iq Unified Manager For Vmware Vsphere
cpe:2.3:a:netapp:active_iq_unified_manager_for_vmware_vsphere:*:*:*:*:*:*:*:*
Range: >=9.5
NetApp/Hci Management Node
cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*
NetApp/Snapprotect
cpe:2.3:a:netapp:snapprotect:-:*:*:*:*:*:*:*
NetApp/Solidfire
cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*
Canonical/Ubuntu Linux5 versions
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*+ 4 more
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
Debian/linux
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Linux/Kernel2 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=3.10.1,<=3.10.108
- (no CPE)range: 3.10.x and 4.18.x
NetApp/Cn1610 Firmware
cpe:2.3:o:netapp:cn1610_firmware:-:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
Ubuntu/Kernelllm-create
Red Hat/Kernelllm-fuzzy
osv-coords110 versions
pkg:rpm/opensuse/kernel-debug&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/kernel-kvmsmall&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/kernel-vanilla&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/kernel-zfcpdump&distro=openSUSE%20Leap%2015.3 pkg:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP4 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP1 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP4 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP1 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/kernel-default&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/kernel-docs&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/kernel-livepatch-SLE15-SP1_Update_27&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP1 pkg:rpm/suse/kernel-livepatch-SLE15_Update_26&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5 pkg:rpm/suse/kernel-rt_debug&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5 pkg:rpm/suse/kernel-source&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/kernel-source&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/kernel-source&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/kernel-source-azure&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-source-azure&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5 pkg:rpm/suse/kernel-syms&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/kernel-syms&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/kernel-syms&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/kernel-syms-azure&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-syms-azure&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5 pkg:rpm/suse/kernel-vanilla&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/kernel-vanilla&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/kernel-vanilla&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kernel-vanilla&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kgraft-patch-SLE12-SP4_Update_23&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP4 pkg:rpm/suse/kgraft-patch-SLE12-SP5_Update_23&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP5
< 4.12.14-197.102.2+ 109 more
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-16.73.2
- (no CPE)range: < 4.12.14-16.73.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.4.121-92.196.2
- (no CPE)range: < 4.4.180-94.182.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 1-3.3.1
- (no CPE)range: < 1-1.3.1
- (no CPE)range: < 4.12.14-197.102.1
- (no CPE)range: < 4.12.14-197.102.1
- (no CPE)range: < 4.12.14-197.102.1
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-197.102.1
- (no CPE)range: < 4.12.14-197.102.1
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-197.102.1
- (no CPE)range: < 4.12.14-122.88.2
- (no CPE)range: < 4.12.14-10.57.2
- (no CPE)range: < 4.12.14-10.57.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.4.121-92.196.2
- (no CPE)range: < 4.4.180-94.182.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-16.73.1
- (no CPE)range: < 4.12.14-16.73.1
- (no CPE)range: < 4.12.14-10.57.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.4.121-92.196.2
- (no CPE)range: < 4.4.180-94.182.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-16.73.1
- (no CPE)range: < 4.12.14-16.73.1
- (no CPE)range: < 4.12.14-10.57.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 1-6.3.1
- (no CPE)range: < 1-8.5.1

Patches

Vulnerability mechanics

References

bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
access.redhat.com/errata/RHSA-2019:3309nvdThird Party Advisory
access.redhat.com/errata/RHSA-2019:3517nvdThird Party Advisory
lists.debian.org/debian-lts-announce/2020/09/msg00025.htmlnvdMailing ListThird Party Advisory
security.netapp.com/advisory/ntap-20190411-0003/nvdThird Party Advisory
usn.ubuntu.com/3979-1/nvdThird Party Advisory
usn.ubuntu.com/3980-1/nvdThird Party Advisory
usn.ubuntu.com/3980-2/nvdThird Party Advisory
usn.ubuntu.com/3981-1/nvdThird Party Advisory
usn.ubuntu.com/3981-2/nvdThird Party Advisory
usn.ubuntu.com/3982-1/nvdThird Party Advisory
usn.ubuntu.com/3982-2/nvdThird Party Advisory
www.oracle.com/security-alerts/cpuApr2021.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000