In the Linux kernel before 5.0, a memory leak exists in sit_init_net() in net/ipv6/sit.c when register_netdev() fails to register sitn->fb_tunnel_dev, which may cause denial of service, aka CID-07f12b26e21a.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 1, 2020 | Sep 30, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 30, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 21, 2019 | Sep 30, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 30, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 1, 2020 | Sep 30, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-default-man | Mar 3, 2020 | Sep 30, 2019 |
| Ubuntu | — | Upgrade linux-azureUpgrade linux-hweUpgrade linux-snapdragonUpgrade linux-azure-edgeUpgrade linux-gke-4.15Upgrade linux-oemUpgrade linux-azure-fipsUpgrade linux-gcp-edgeUpgrade linux-kvmUpgrade linuxUpgrade linux-aws-fipsUpgrade linux-awsUpgrade linux-raspi2Upgrade linux-fipsUpgrade linux-gcpUpgrade linux-hwe-edgeUpgrade linux-oracleUpgrade linux-aws-hwe | Nov 19, 2024 | Sep 30, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 30, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub