In the Linux kernel before 5.0, a memory leak exists in sit_init_net() in net/ipv6/sit.c when register_netdev() fails to register sitn->fb_tunnel_dev, which may cause denial of service, aka CID-07f12b26e21a.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 1, 2020 | Sep 30, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 30, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 21, 2019 | Sep 30, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 30, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 1, 2020 | Sep 30, 2019 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-baseUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-man | Mar 3, 2020 | Sep 30, 2019 |
| Ubuntu | — | Upgrade linux-aws-hweUpgrade linux-hwe-edgeUpgrade linux-oracleUpgrade linux-raspi2Upgrade linux-fipsUpgrade linux-gcpUpgrade linux-azureUpgrade linuxUpgrade linux-oemUpgrade linux-azure-edgeUpgrade linux-gcp-edgeUpgrade linux-hweUpgrade linux-azure-fipsUpgrade linux-gke-4.15Upgrade linux-snapdragonUpgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-aws | Nov 19, 2024 | Sep 30, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 30, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub