CVE-2019-12378: Denial of Service Vulnerability in Linux Kernel
Summary
CVE-2019-12378: An issue was discovered in ip6_ra_control in net/ipv6/ipv6_sockglue.c in the Linux kernel through 5.1.5. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is an open-source monolithic Unix-like computer operating system kernel. It provides the core functionality required for running applications and managing hardware resources. The Debian distribution is a popular Linux distribution that includes the Linux kernel. This vulnerability affects Debian versions 10, 11, 12, and 13.
Vulnerability Detail
An unchecked kmalloc of new_ra in the ip6_ra_control function of the Linux kernel through version 5.1.5 can lead to a denial of service attack. An attacker can exploit this vulnerability to cause a NULL pointer dereference and crash the system. However, there is a dispute regarding whether this is a valid issue.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The CVE-2019-12378 vulnerability in the Linux kernel can lead to a denial of service attack. It is important to update the Linux kernel to a patched version to mitigate this vulnerability. For further assistance and support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to a denial of service, causing the system to crash.
Any attacker with the ability to send malicious network traffic to the affected system can potentially exploit this vulnerability.
There is no known exploit available at the moment.
Updating the Linux kernel to a patched version is the recommended mitigation for this vulnerability.
No, this vulnerability affects the Linux kernel in general, but the provided information specifically relates to its impact on Debian distributions.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
