There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 22, 2020 | Sep 20, 2019 |
| Debian | — | Upgrade linux | Sep 25, 2019 | Sep 20, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-debug-develUpgrade perf | Dec 4, 2019 | Sep 20, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | Nov 19, 2019 | Sep 20, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-headers | Nov 19, 2019 | Sep 20, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade perfUpgrade python3-perfUpgrade bpftoolUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-source | Nov 19, 2019 | Sep 20, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 7, 2020 | Aug 28, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 20, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jan 22, 2020 | Sep 20, 2019 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-ec2-devel | Sep 21, 2019 | Sep 20, 2019 |
| Ubuntu | — | Upgrade linux-image-powerpc-e500mcUpgrade linux-image-kvmUpgrade linux-image-5.0.0-1019-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1024-snapdragonUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-166-powerpc64-embUpgrade linux-image-4.15.0-1027-oracleUpgrade linux-image-4.4.0-1096-awsUpgrade linux-image-4.15.0-1047-gcpUpgrade linux-image-4.4.0-166-powerpc-smpUpgrade linux-image-4.4.0-166-powerpc-e500mcUpgrade linux-image-4.4.0-1060-kvmUpgrade linux-image-4.4.0-1124-raspi2Upgrade linux-image-azureUpgrade linux-image-5.0.0-1021-gcpUpgrade linux-image-4.15.0-1059-oemUpgrade linux-image-gke-4.15Upgrade linux-image-oemUpgrade linux-image-4.4.0-166-genericUpgrade linux-image-4.15.0-1048-kvmUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-66-lowlatencyUpgrade linux-image-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-166-powerpc64-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.0.0-1023-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-gke-5.0Upgrade linux-image-5.0.0-1023-gkeUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-166-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.0.0-32-genericUpgrade linux-image-4.15.0-66-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-5.0.0-32-lowlatencyUpgrade linux-image-4.15.0-1061-azureUpgrade linux-image-4.4.0-1056-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-166-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-66-genericUpgrade linux-image-4.15.0-1049-raspi2Upgrade linux-image-5.0.0-1020-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1052-awsUpgrade linux-image-5.0.0-32-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-5.0.0-1020-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1066-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1046-gkeUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-gcpUpgrade linux-image-4.4.0-1128-snapdragon | Oct 18, 2019 | Sep 20, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub