There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 22, 2020 | Sep 20, 2019 |
| Debian | — | Upgrade linux | Sep 25, 2019 | Sep 20, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debugUpgrade kernel-debug-develUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfo | Dec 4, 2019 | Sep 20, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perf | Nov 19, 2019 | Sep 20, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade kernel-devel | Nov 19, 2019 | Sep 20, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-sourceUpgrade perfUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade python-perfUpgrade kernel-headers | Nov 19, 2019 | Sep 20, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 7, 2020 | Aug 28, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 20, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jan 22, 2020 | Sep 20, 2019 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-ec2-develUpgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-default | Sep 21, 2019 | Sep 20, 2019 |
| Ubuntu | — | Upgrade linux-image-raspi2Upgrade linux-image-5.0.0-1020-raspi2Upgrade linux-image-4.15.0-66-genericUpgrade linux-image-4.15.0-1066-snapdragonUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-4.15.0-1049-raspi2Upgrade linux-image-4.4.0-1056-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.0.0-1020-kvmUpgrade linux-image-4.15.0-66-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-oracleUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1052-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-166-generic-lpaeUpgrade linux-image-5.0.0-32-generic-lpaeUpgrade linux-image-4.15.0-1061-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.0.0-1023-gkeUpgrade linux-image-5.0.0-32-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.0.0-32-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gke-5.0Upgrade linux-image-4.15.0-1046-gkeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-1128-snapdragonUpgrade linux-image-4.4.0-166-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-66-lowlatencyUpgrade linux-image-4.4.0-166-genericUpgrade linux-image-5.0.0-1023-azureUpgrade linux-image-4.4.0-166-powerpc-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1048-kvmUpgrade linux-image-snapdragonUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1047-gcpUpgrade linux-image-4.4.0-1096-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-166-powerpc64-embUpgrade linux-image-4.4.0-1124-raspi2Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-166-powerpc-e500mcUpgrade linux-image-azureUpgrade linux-image-4.4.0-166-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1060-kvmUpgrade linux-image-5.0.0-1024-snapdragonUpgrade linux-image-4.15.0-1027-oracleUpgrade linux-image-5.0.0-1021-gcpUpgrade linux-image-4.15.0-1059-oemUpgrade linux-image-5.0.0-1019-awsUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04 | Oct 18, 2019 | Sep 20, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub