{"id":"CVE-2019-10140","aliases":["EUVD-2019-2179","GHSA-cqfm-vfh2-jprp","RHSA-2019:2029","RHSA-2019:2043"],"status":"published","title":"A vulnerability was found in Linux kernel's, versions up to 3.10, implementation of overlayfs. An...","description":"A vulnerability was found in Linux kernel's, versions up to 3.10, implementation of overlayfs. An attacker with local access can create a denial of service situation via NULL pointer dereference in ovl_posix_acl_create function in fs/overlayfs/dir.c. This can allow attackers with ability to create directories on overlayfs to crash the kernel creating a denial of service (DOS).","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.0032,"percentile":0.25153,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-476"],"published":"2019-08-15T16:50:55Z","modified":"2026-07-01T10:05:29Z","affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bpftool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bpftool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bpftool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-bootwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-kdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bpftool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-abi-whitelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.el7"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.rt56.1022.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.rt56.1022.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.rt56.1022.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.rt56.1022.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.rt56.1022.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debug-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.rt56.1022.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.rt56.1022.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.rt56.1022.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.rt56.1022.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.rt56.1022.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.rt56.1022.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.rt56.1022.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.rt56.1022.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.rt56.1022.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.rt56.1022.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.rt56.1022.el7"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:rhel_extras_rt:7","package":"kernel-rt-trace-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.0-1062.rt56.1022.el7"}]}],"bundled":27}],"products":[{"vendor":"linux","product":"linux_kernel"},{"vendor":"opensource","product":"kernel:"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"the linux foundation","product":"kernel:"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10140","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190905-0002/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10140","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2029","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2043","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10140","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1677778","tags":["report"]},{"url":"https://github.com/advisories/GHSA-cqfm-vfh2-jprp"},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335986","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1436351","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537033","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1553216","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1555145","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1577640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1589890","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1590228","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1593417","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1597747","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1597766","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1597771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1597775","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609699","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1611005","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1616109","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1616425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619846","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1620555","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1623067","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627563","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627731","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1628378","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631045","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1645121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1659146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1661503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1663176","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1663179","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1664110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1665990","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1671930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1684780","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1689426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693457","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1698757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1705937","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1709164","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1712072","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2029.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-7755","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-7755","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7755","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-8087","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-8087","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8087","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-9363","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-9363","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-9363","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-9516","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-9516","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-9516","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-9517","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-9517","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-9517","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10853","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10853","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10853","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-13053","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-13053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-13053","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-13093","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-13093","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-13093","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-13094","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-13094","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-13094","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-13095","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-13095","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-13095","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14625","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14625","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14625","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14734","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14734","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14734","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-15594","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-15594","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-15594","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16658","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16658","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16658","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16885","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16885","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16885","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-18281","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-18281","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18281","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-19824","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1655816","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-19824","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-19824","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2018/12/03/1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-3459","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3459","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3459","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-3460","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3460","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3460","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-3882","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3882","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3882","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-3900","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3900","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3900","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-5489","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-5489","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-5489","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-7222","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-7222","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-7222","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1819156","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9456","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9456","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10140","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11599","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11599","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11599","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11810","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11810","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11810","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11833","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11833","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11833","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1759059","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15927","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15927","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html-single/7.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1593361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1642619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1664380","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1665278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1671126","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1684745","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1717212","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2043.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-10140","description":"A vulnerability was found in Linux kernel's, versions up to 3.10, implementation of overlayfs. An attacker with local access can create a denial of service situation via NULL pointer dereference in ovl_posix_acl_create function in fs/overlayfs/dir.c. This can allow attackers with ability to create directories on overlayfs to crash the kernel creating a denial of service (DOS).","status":"published","published":"2019-08-15T16:50:55Z","modified":"2024-08-04T22:10:09.983Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:20:19.056416Z"}],"euvd":[{"id":"EUVD-2019-2179","description":"A vulnerability was found in Linux kernel's, versions up to 3.10, implementation of overlayfs. An attacker with local access can create a denial of service situation via NULL pointer dereference in ovl_posix_acl_create function in fs/overlayfs/dir.c. This can allow attackers with ability to create directories on overlayfs to crash the kernel creating a denial of service (DOS).","status":"published","published":"2019-08-15T16:50:55Z","modified":"2024-08-04T22:10:09Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T02:40:54.154728Z"}],"ghsa":[{"id":"GHSA-cqfm-vfh2-jprp","title":"A vulnerability was found in Linux kernel's, versions up to 3.10, implementation of overlayfs. An...","description":"A vulnerability was found in Linux kernel's, versions up to 3.10, implementation of overlayfs. An attacker with local access can create a denial of service situation via NULL pointer dereference in ovl_posix_acl_create function in fs/overlayfs/dir.c. This can allow attackers with ability to create directories on overlayfs to crash the kernel creating a denial of service (DOS).","status":"published","published":"2022-05-24T16:53:40Z","modified":"2023-02-02T18:30:56Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:52:47.451891Z"}],"nvd":[{"id":"CVE-2019-10140","description":"A vulnerability was found in Linux kernel's, versions up to 3.10, implementation of overlayfs. An attacker with local access can create a denial of service situation via NULL pointer dereference in ovl_posix_acl_create function in fs/overlayfs/dir.c. This can allow attackers with ability to create directories on overlayfs to crash the kernel creating a denial of service (DOS).","status":"published","published":"2019-08-15T17:15:12.083Z","modified":"2026-06-17T02:10:20.38Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:05:22.878504Z"}],"osv":[{"id":"RHSA-2019:2029","title":"Red Hat Security Advisory: kernel security, bug fix, and enhancement update","status":"published","published":"2024-09-16T01:52:29Z","modified":"2026-07-01T10:05:28Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:2043","title":"Red Hat Security Advisory: kernel-rt security and bug fix update","status":"published","published":"2024-09-13T21:59:56Z","modified":"2026-07-01T10:05:29Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"}]}}