Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U H N H 7.1 .0075 52.0 —
AFFECTED Product Versions Fixed Linux 446fda4f26822b2d42ab3396aafcedf38a9ff2b6 – — Linux 2.6.19 – 3.16.66
TIMELINE Feb 26 Reserved by Linux Feb 26 Published (CNA: Linux) Aug 4 RESCORED — CVE-2019-25160 (Linux). CVSS 9.1 → 7.1 (NVD).
In the Linux kernel, the following vulnerability has been resolved: netlabel: fix out-of-bounds memory accesses There are two array out-of-bounds memory accesses, one in cipso_v4_map_lvl_valid(), the other in netlbl_bitmap_walk(). Both errors are embarassingly simple, and the fixes are straightforward. As a FYI for anyone backporting this patch to kernels prior to v4.8, you'll want to apply the netlbl_bitmap_walk() patch to cipso_v4_bitmap_walk() as netlbl_bitmap_walk() doesn't exist before Linux v4.8.
| Date | Event | Detail |
|---|---|---|
| February 26, 2024 | Reserved | Reserved by Linux |
| February 26, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2019-25160 (Linux). CVSS 9.1 → 7.1 (NVD). |
Authoritative record: CVE-2019-25160 at cve.org
Vendors: linux
Weaknesses: CWE-125
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2019-25160 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.