Jakub Kicinski

2 exploits Active since Jan 2020

CVE-2019-20422 WRITEUP MEDIUM WRITEUP

Linux Kernel < 5.3.4 - Denial of Service via fib6_rule_lookup Reference Count Mishandling

In the Linux kernel before 5.3.4, fib6_rule_lookup in net/ipv6/ip6_fib.c mishandles the RT6_LOOKUP_F_DST_NOREF flag in a reference-count decision, leading to (for example) a crash that was identified by syzkaller, aka CID-7b09c2d052db.

CVSS 5.5

View Code

CVE-2023-26545 WRITEUP MEDIUM WRITEUP

Linux kernel <6.1.13 - Use After Free

In the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an allocation failure (for registering the sysctl table under a new location) during the renaming of a device.

CVSS 4.7

View Code