CVE-2019-18198

HIGH

Linux Kernel 5.3-5.3.3 - Use-After-Free in fib6_rule_suppress

Title source: llm
STIX 2.1

Description

In the Linux kernel before 5.3.4, a reference count usage error in the fib6_rule_suppress() function in the fib6 suppression feature of net/ipv6/fib6_rules.c, when handling the FIB_LOOKUP_NOREF flag, can be exploited by a local attacker to corrupt memory, aka CID-ca7a03c41753.

References (6)

Core 6
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://launchpad.net/bugs/1847478
Release Notes, Vendor Advisory x_refsource_misc
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.4
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/4161-1/
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20191031-0005/

Scores

CVSS v3 7.8
EPSS 0.0046
EPSS Percentile 35.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-772
Status published
Products (2)
canonical/ubuntu_linux 19.10
linux/linux_kernel 5.3 - 5.3.4
Published Oct 18, 2019
Tracked Since Feb 18, 2026