VDB

DEBIAN-CVE-2019-12378

DEBIAN-CVE-2019-12378 PUBLISHED CVSS 5.5 MEDIUM

An issue was discovered in ip6_ra_control in net/ipv6/ipv6_sockglue.c in the Linux kernel through 5.1.5. There is an unchecked kmalloc of new_ra, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). NOTE: This has been disputed as not an issue

Risk Scores

CVSS 3.0
5.5
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Debian:14linux6.18.12-1, 6.12.41-1, 6.12.43-1
Debian:13linux6.12.41-1, 0, 0
Debian:11linux0, *, 5.10.234-1
Debian:12linux6.11.5-1~bpo12+1, 6.11.7-1, 6.11.9-1

Timeline

  • May 28, 2019 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 50/day Open console ›