Denial of Service Vulnerability in Linux Kernel Packages - CVE-2019-12381
Summary
UBUNTU-CVE-2019-12381: An issue was discovered in ip_ra_control in net/ipv4/ip_sockglue.c in the Linux kernel through 5.1.5. Affects linux versions 3.11.0-12.19 – 3.13.0-98.145. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of Linux operating systems, responsible for managing hardware and system resources. It provides essential services for all other parts of the system, including user interfaces and applications. The kernel is modular, allowing for the addition of various features and functionalities. However, vulnerabilities can arise, such as CVE-2019-12381, which affects specific versions of the kernel packages, potentially leading to system instability.
Vulnerability Detail
CVE-2019-12381 is a vulnerability found in the ip_ra_control function within the Linux kernel, specifically in the net/ipv4/ip_sockglue.c file. This vulnerability stems from an unchecked kmalloc of new_ra, which may allow an attacker to trigger a denial of service by causing a NULL pointer dereference, leading to a system crash. Although there is a dispute regarding the actual impact, as new_ra is not utilized if it is NULL, the potential for system instability remains a concern.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can limit the exposure of your system by restricting access to the kernel functions that may be exploited. This can be done by configuring firewall rules or using security modules to limit network access.
Conclusion
CVE-2019-12381 is a significant vulnerability in the Linux kernel that can lead to system crashes if exploited. It is crucial to update your kernel packages to the latest patched versions to mitigate this risk. Regular monitoring and updates are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
CVE-2019-12381 is a vulnerability in the Linux kernel that may lead to a denial of service due to an unchecked memory allocation.
If exploited, this vulnerability can cause your system to crash, leading to downtime and potential data loss.
The vulnerability affects specific versions of the Linux kernel, including those mentioned in the Ubuntu security notices.
You can use Vulert to monitor and alert you for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Yes, patched versions of the affected Linux kernel packages are available. Updating your packages will resolve the vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
