VULNERABILITY INTELLIGENCE

CVE-2019-16994

CVSS score4.7 MEDIUM
EPSS probability0.45%
CISA KEVNot currently listed
Published2019-09-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

In the Linux kernel before 5.0, a memory leak exists in sit_init_net() in net/ipv6/sit.c when register_netdev() fails to register sitn->fb_tunnel_dev, which may cause denial of service, aka CID-07f12b26e21a.

Weakness classification

  • nvd@nist.gov: CWE-401

Primary references