CVE-2019-9162: Canonical Ubuntu Linux

High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days.

In the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module has insufficient ASN.1 length checks (aka an array index error), making out-of-bounds read and write operations possible, leading to an OOPS or local privilege escalation. This affects snmp_version and snmp_helper.

Affected products

• Canonical Ubuntu Linux: version 18.04 only; version 18.10 only
• Linux Linux Kernel: from 4.19, before 4.19.25 (fixed in 4.19.25); from 4.20, before 4.20.12 (fixed in 4.20.12)
• Netapp CN1610 Firmware: affected versions not specified
• Netapp Hci Management Node: affected versions not specified
• Netapp Snapprotect: affected versions not specified
• Netapp Solidfire: affected versions not specified

Published 2019-02-25. Last modified 2026-06-17.