There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 22, 2020 | Sep 20, 2019 |
| Debian | — | Upgrade linux | Sep 25, 2019 | Sep 20, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel | Dec 4, 2019 | Sep 20, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-devel | Nov 19, 2019 | Sep 20, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernel | Nov 19, 2019 | Sep 20, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-sourceUpgrade bpftoolUpgrade python-perfUpgrade python3-perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel | Nov 19, 2019 | Sep 20, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 6, 2020 | Aug 28, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 20, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 22, 2020 | Sep 20, 2019 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2-develUpgrade kernel-ec2Upgrade kernel-default-extra | Sep 21, 2019 | Sep 20, 2019 |
| Ubuntu | — | Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-66-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-kvmUpgrade linux-image-4.4.0-166-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-5.0Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.0.0-1020-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1056-awsUpgrade linux-image-4.15.0-1049-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-166-powerpc-e500mcUpgrade linux-image-4.15.0-1052-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1060-kvmUpgrade linux-image-4.4.0-1124-raspi2Upgrade linux-image-4.15.0-1061-azureUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-5.0.0-32-lowlatencyUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-166-powerpc64-smpUpgrade linux-image-4.4.0-166-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1027-oracleUpgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-1024-snapdragonUpgrade linux-image-5.0.0-32-generic-lpaeUpgrade linux-image-4.4.0-1128-snapdragonUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-66-generic-lpaeUpgrade linux-image-4.15.0-1046-gkeUpgrade linux-image-5.0.0-32-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.0.0-1023-azureUpgrade linux-image-4.4.0-1096-awsUpgrade linux-image-5.0.0-1020-raspi2Upgrade linux-image-5.0.0-1019-awsUpgrade linux-image-4.4.0-166-powerpc64-embUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1059-oemUpgrade linux-image-azureUpgrade linux-image-oemUpgrade linux-image-4.15.0-1048-kvmUpgrade linux-image-4.15.0-66-lowlatencyUpgrade linux-image-5.0.0-1023-gkeUpgrade linux-image-5.0.0-1021-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-166-powerpc-smpUpgrade linux-image-4.15.0-1047-gcpUpgrade linux-image-4.15.0-1066-snapdragonUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-4.4.0-166-genericUpgrade linux-image-generic-lpae-lts-xenial | Oct 18, 2019 | Sep 20, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub