CVE-2019-18198
kernel: reference count usage error in fib6_rule_suppress function in net/ipv6/fib6_rules.c
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 24, 2019
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel’s IPv6 routing system. A local attacker with the ability to configure routing can create a situation where they can corrupt memory or possibly escalate privileges.
Statement
This flaw is rated as moderate as setting up the condition requires CAP_NET_ADMIN privileges which are not available to regular users.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
As the IPV6 module will be auto-loaded when required, its use can be disabled by preventing the module from loading with the following instructions:
https://access.redhat.com/solutions/8790
If the system requires IPV6 to work correctly, this mitigation may not be suitable.
If you need further assistance, see KCS article https://access.redhat.com/solutions/41278 or contact Red Hat Global Support Services.
CVSS / CWE
CVSS 3.1 · 6.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime