VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 30, 2019· Updated Aug 5, 2024

CVE-2019-16994

CVE-2019-16994

Description

In the Linux kernel before 5.0, a memory leak exists in sit_init_net() in net/ipv6/sit.c when register_netdev() fails to register sitn->fb_tunnel_dev, which may cause denial of service, aka CID-07f12b26e21a.

Affected products

101

Patches

1
07f12b26e21a

net: sit: fix memory leak in sit_init_net()

https://github.com/torvalds/linuxMao WenanMar 1, 2019via osv
commit
1 file changed · +1 −0
  • net/ipv6/sit.c+1 −0 modified
    @@ -1873,6 +1873,7 @@ static int __net_init sit_init_net(struct net *net)
 
 err_reg_dev:
 	ipip6_dev_free(sitn->fb_tunnel_dev);
+	free_netdev(sitn->fb_tunnel_dev);
 err_alloc_dev:
 	return err;
 }

Vulnerability mechanics

Generated on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

4

News mentions

0

No linked articles in our index yet.