PT-2019-4349 · Linux+2 · Linux+2

Jason A. Donenfeld + 1 · Published 2019-09-26 · Updated 2023-01-20 · CVE-2019-18198

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux versions prior to 5.3.4

Description A local attacker can exploit a reference count usage error in the fib6 rule suppress() function in the fib6 suppression feature of the net/ipv6/fib6 rules.c file, when handling the FIB LOOKUP NOREF flag, to corrupt memory. This issue is related to the lack of resource release after its expiration, which can allow an attacker to cause memory damage.

Recommendations For versions prior to 5.3.4, update to version 5.3.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the fib6 rule suppress() function until a patch is available.

Exploit

Fix

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

Related Identifiers

ALT-PU-2019-2845

BDU:2020-00069

CVE-2019-18198

USN-4161-1

Affected Products

Alt Linux

Linux

Ubuntu

References · 21

• 🔥 https://launchpad.net/bugs/1847478 · Exploit
• https://github.com/torvalds/linux/commit/ca7a03c4175366a92cee0ccc4fec0038c3266e26 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2019-18198 · Security Note
• https://bdu.fstec.ru/vul/2020-00069 · Security Note
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ca7a03c4175366a92cee0ccc4fec0038c3266e26 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4161-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-18198 · Security Note
• https://ubuntu.com/security/CVE-2019-18198 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-18198 · Vendor Advisory
• https://usn.ubuntu.com/4161-1 · Vendor Advisory
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.4 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-18198 · Vendor Advisory
• https://security.netapp.com/advisory/ntap-20191031-0005 · Note
• https://vuldb.com/?id.143961 · Note
• https://t.me/cibsecurity/34570 · Telegram Post