CVE-2019-15666: Medium severity linux kernel vulnerability
A flaw regarding the removal of xfrm policies from the kernel may possibly crash the system or corrupt memory or escalate privilges . Policies addition or removal is a privileged operation (usually done through the ip command) or via a netlink socket.
A local privileged user (with CAPNETADMIN or root) is required to exploit this condition. With this limitation, this issue is rated as Moderate.
Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b805d78d300bcf2c83d6df7da0c818b0fee41427 https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.19
Other sources
A flaw was found in the Linux kernel. When xfrm policy removal occurs a system crash could occur. These policy changes generally occur through the ip command or a netlink socket.
An issue was discovered in the Linux kernel before 5.0.19. There is an out-of-bounds array access in xfrmpolicyunlink, which will cause denial of service, because verifynewpolicyinfo in net/xfrm/xfrmuser.c mishandles directory validation.
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2019-15666?
CVE-2019-15666 is considered a moderate severity vulnerability due to its potential to crash the system or escalate privileges.
How do I fix CVE-2019-15666?
You can fix CVE-2019-15666 by upgrading to the appropriate kernel versions specified by Red Hat or other affected distributions.
Who is affected by CVE-2019-15666?
Local privileged users on systems using the affected kernels, such as certain Red Hat and Debian versions, may be impacted by CVE-2019-15666.
What type of vulnerabilities does CVE-2019-15666 involve?
CVE-2019-15666 involves vulnerabilities related to the management of xfrm policies in the Linux kernel.
Can CVE-2019-15666 lead to a system crash?
Yes, CVE-2019-15666 may potentially cause a system crash if exploited by a local privileged user.