Denial of Service Vulnerability in Linux Kernel Packages - CVE-2019-12378
Summary
UBUNTU-CVE-2019-12378: An issue was discovered in ip6_ra_control in net/ipv6/ipv6_sockglue.c in the Linux kernel through 5.1.5. Affects linux versions 3.11.0-12.19 – 3.13.0-98.145. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of Linux operating systems, responsible for managing hardware resources and providing essential services to applications. It is widely used in various environments, from servers to embedded systems. The kernel's stability and security are paramount, as vulnerabilities can lead to system crashes or unauthorized access. CVE-2019-12378 affects multiple versions of the Linux kernel, particularly those in Ubuntu 14.04 LTS, exposing systems to potential denial of service attacks.
Vulnerability Detail
An issue was discovered in the function ip6_ra_control in the Linux kernel, specifically in the file net/ipv6/ipv6_sockglue.c. The vulnerability arises from an unchecked kmalloc of new_ra, which can lead to a NULL pointer dereference. This flaw allows an attacker to trigger a system crash, resulting in a denial of service. Although there has been some dispute regarding the severity of this issue, it is classified with a CVSS score of 5.5, indicating a medium level of risk.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If immediate patching is not feasible, consider disabling IPv6 on affected systems as a temporary workaround. This can be done by adding the following line to the /etc/sysctl.conf file:
net.ipv6.conf.all.disable_ipv6 = 1
After making this change, apply the new settings with:
sudo sysctl -p
Conclusion
CVE-2019-12378 presents a significant risk to systems running affected versions of the Linux kernel, particularly in Ubuntu 14.04 LTS. It is essential to apply the recommended updates or implement workarounds to mitigate the risk of denial of service attacks. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system security.
See every vulnerability recorded for linux →
FAQ
CVE-2019-12378 is a vulnerability in the Linux kernel that can lead to a denial of service due to an unchecked memory allocation.
Exploitation of this vulnerability can cause your system to crash, leading to downtime and potential data loss.
Yes, Ubuntu 14.04 LTS is affected by this vulnerability. It is crucial to update your kernel packages.
Consider disabling IPv6 as a temporary workaround until you can apply the necessary updates.
You can use Vulert, which monitors open-source vulnerabilities in your software using a manifest file like package-lock.json. Check your application for vulnerabilities at Vulert Scanner.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
