Ubuntu.comUB:CVE-2019-20422CVE-2019-20422
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
Percentile
12.6%
In the Linux kernel before 5.3.4, fib6_rule_lookup in net/ipv6/ip6_fib.c
mishandles the RT6_LOOKUP_F_DST_NOREF flag in a reference-count decision,
leading to (for example) a crash that was identified by syzkaller, aka
CID-7b09c2d052db.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 19.10 | noarch | linux | < 5.3.0-22.24 | UNKNOWN |
| ubuntu | 19.10 | noarch | linux-aws | < 5.3.0-1007.8 | UNKNOWN |
| ubuntu | 19.10 | noarch | linux-azure | < 5.3.0-1007.8 | UNKNOWN |
| ubuntu | 19.10 | noarch | linux-gcp | < 5.3.0-1008.9 | UNKNOWN |
| ubuntu | 19.10 | noarch | linux-kvm | < 5.3.0-1007.8 | UNKNOWN |
| ubuntu | 19.10 | noarch | linux-oracle | < 5.3.0-1006.7 | UNKNOWN |
| ubuntu | 19.10 | noarch | linux-raspi2 | < 5.3.0-1012.14 | UNKNOWN |
References
cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.4
git.kernel.org/linus/7b09c2d052db4b4ad0b27b97918b46a7746966fa
github.com/torvalds/linux/commit/7b09c2d052db4b4ad0b27b97918b46a7746966fa
launchpad.net/bugs/cve/CVE-2019-20422
nvd.nist.gov/vuln/detail/CVE-2019-20422
security-tracker.debian.org/tracker/CVE-2019-20422
www.cve.org/CVERecord?id=CVE-2019-20422
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
Percentile
12.6%