CVE-2019-15916: High severity ibm data risk manager vulnerability
A flaw that allowed an attacker to leak kernel memory was found in the network subsystem where an attacker with permissions to create tun/tap devices can create a denial of service and panic the system.
Other sources
An issue was discovered in the Linux kernel before 5.0.1. There is a memory leak in registerqueuekobjects() in net/core/net-sysfs.c, which will cause denial of service.
An issue was discovered in the Linux kernels network tun/tap device creation. An attacker with local account can issue an ioctl to a device which can cause a small memory leak which can not be reclaimed. Each time this attack is repeated additional memory is leaked and this may eventually consume all memory in the system causing a denial of service DOS.
Reference: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.1 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=895a5e96dbd6386c8e78e5b78e067dcc67b7f0ab
— Red Hat
Linux Kernel is vulnerable to a denial of service, caused by a memory leak in registerqueuekobjects() in net/core/net-sysfs.c. A local attacker could exploit this vulnerability to cause the system to crash.
— IBM
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2019-15916?
CVE-2019-15916 is classified as a high severity vulnerability due to its potential to leak kernel memory and cause a denial of service.
How do I fix CVE-2019-15916?
To resolve CVE-2019-15916, upgrade to a kernel version that is patched, such as kernel-rt 0:3.10.0-1127.rt56.1093.el7 or kernel-alt 0:4.14.0-115.18.1.el7a.
What systems are affected by CVE-2019-15916?
CVE-2019-15916 affects various Linux kernel versions prior to 5.0.1, specifically those in the Red Hat ecosystem.
Can CVE-2019-15916 lead to data breaches?
Yes, CVE-2019-15916 can potentially lead to sensitive data exposure through kernel memory leaks.
What is the impact of CVE-2019-15916 on system stability?
CVE-2019-15916 can cause system instability, resulting in kernel panics and denial of service scenarios.