CVE-2019-16994: In the Linux kernel before 5.0, a memory leak exists in sit_init_net() in net/ipv6/sit.c when register_netd...

Security readout for executives and security teams

This CVE is a Linux kernel memory leak that can occur during setup of the SIT IPv6-over-IPv4 tunnel device. If triggered repeatedly, leaked kernel memory could contribute to denial of service. The public bundle does not provide CVSS scoring, exploitability details, or evidence of active exploitation. Exposure is most likely on systems or appliances running Linux kernel versions before 5.0, especially where vendor kernels include the vulnerable SIT tunnel code. Downstream exposure must be confirmed through vendor advisories or package changelogs. Treat this as a moderate availability risk. It is kernel-level and could affect uptime, but the bundle lacks severity scoring, exploitation evidence, and clear attack prerequisites. Patch through normal kernel and appliance maintenance cycles unless critical systems show exposure. Mitigation focus: Upgrade to a kernel or vendor package containing commit 07f12b26e21a.; Check relevant vendor advisories for supported fixed releases.; Prioritize externally critical or uptime-sensitive Linux systems first..

Prepared

Jun 6, 2026, 13:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.