CVE-2019-12381

Name	CVE-2019-12381
Description	DISPUTED An issue was discovered in ip_ra_control in net/ipv4/ip_sockglue.c in the Linux kernel through 5.1.5. There is an unchecked kmalloc of new_ra, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). NOTE: this is disputed because new_ra is never used if it is NULL.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
NVD severity	medium (attack range: local)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
linux (PTS)	jessie	3.16.56-1+deb8u1	vulnerable
	jessie (security)	3.16.72-1	vulnerable
	stretch	4.9.168-1	vulnerable
	stretch (security)	4.9.168-1+deb9u5	vulnerable
	buster	4.19.37-5	vulnerable
	buster (security)	4.19.37-5+deb10u2	vulnerable
	bullseye	4.19.37-6	vulnerable
	sid	5.2.9-2	vulnerable

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
linux	source	(unstable)	(unfixed)	unimportant

Issue with no security impact, see kernel-sec, invalid issue