CVE-2019-20422

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.3.4

Description The issue is related to the fib6 rule lookup function in the Linux kernel, which mishandles the RT6 LOOKUP F DST NOREF flag in a reference-count decision. This can lead to a crash, as identified by syzkaller. The vulnerability is also associated with errors in handling exceptional states, which can be exploited to cause a denial of service.

Recommendations For Linux kernel versions prior to 5.3.4, update to version 5.3.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the fib6 rule lookup function to minimize the risk of exploitation.