PT-2019-4660 · Linux+1 · Linux Kernel+1

Yi Ren

·

Publicado

2019-09-20

·

Atualizado

2021-05-28

·

CVE-2019-20422

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.3.4
Description The issue is related to the fib6 rule lookup function in the Linux kernel, which mishandles the RT6 LOOKUP F DST NOREF flag in a reference-count decision. This can lead to a crash, as identified by syzkaller. The vulnerability is also associated with errors in handling exceptional states, which can be exploited to cause a denial of service.
Recommendations For Linux kernel versions prior to 5.3.4, update to version 5.3.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the fib6 rule lookup function to minimize the risk of exploitation.

Correção

Improper Handling of Exceptional Conditions

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-755

Identificadores relacionados

ALT-PU-2019-2838
ALT-PU-2019-2845
ALT-PU-2019-2891
ALT-PU-2020-1198
ALT-PU-2020-1501
ALT-PU-2020-1714
ALT-PU-2020-2410
ALT-PU-2020-2433
ALT-PU-2021-1870
BDU:2020-00849
CVE-2019-20422

Produtos afetados

Alt Linux
Linux Kernel