{"id":"CVE-2019-16089","title":"An issue was discovered in the Linux kernel through 5.2.13","summary":"An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the nla_nest_start_noflag return value.","severity":"medium","cvss":4.1,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476","CWE-253"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel <= 5.2.13"],"published":"2019-09-06","updated":"2026-10-08","sourceUpdated":"2026-10-08T21:17:15.647","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2019-16089","references":[{"url":"https://lore.kernel.org/patchwork/patch/1106884/","label":"cve@mitre.org"},{"url":"https://lore.kernel.org/patchwork/patch/1126650/","label":"cve@mitre.org"},{"url":"https://security.netapp.com/advisory/ntap-20191004-0001/","label":"cve@mitre.org"},{"url":"https://support.f5.com/csp/article/K03814795?utm_source=f5support&amp%3Butm_medium=RSS","label":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/4414-1/","label":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/4425-1/","label":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/4439-1/","label":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/4440-1/","label":"cve@mitre.org"},{"url":"https://lore.kernel.org/patchwork/patch/1106884/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lore.kernel.org/patchwork/patch/1126650/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20191004-0001/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/csp/article/K03814795?utm_source=f5support&amp%3Butm_medium=RSS","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/4414-1/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/4425-1/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/4439-1/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/4440-1/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2019/cve-2019-16089.json"},{"url":"https://access.redhat.com/security/cve/CVE-2019-16089"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1751393"},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16089"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16089"}],"tags":["nvd","csaf","vex","red-hat","cve.org"],"epss":0.00387,"epssPercentile":0.32606,"ingestedAt":"2026-10-08T22:11:53.701Z","ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-08T20:53:19.489271Z"},"slug":"CVE-2019-16089","body":"## Overview\n\nAn issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the nla_nest_start_noflag return value.\n\n## Affected\n\n- `linux_kernel <= 5.2.13`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · updated 2026-10-08 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2019/cve-2019-16089.json)","depth":"sunlit","depthScore":23,"depthScoreParts":{"impact":22.5,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}