There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 22, 2020 | Sep 20, 2019 |
| Debian | — | Upgrade linux | Sep 25, 2019 | Sep 20, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade perf | Dec 4, 2019 | Sep 20, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfo | Nov 19, 2019 | Sep 20, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-tools | Nov 19, 2019 | Sep 20, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade kernel-source | Nov 19, 2019 | Sep 20, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 6, 2020 | Aug 28, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 20, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 22, 2020 | Sep 20, 2019 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-default-extraUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-build | Sep 21, 2019 | Sep 20, 2019 |
| Ubuntu | — | Upgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-166-powerpc-smpUpgrade linux-image-4.15.0-66-generic-lpaeUpgrade linux-image-4.15.0-1048-kvmUpgrade linux-image-oemUpgrade linux-image-azureUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-166-powerpc64-embUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.0.0-32-genericUpgrade linux-image-5.0.0-1020-raspi2Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.15.0-1047-gcpUpgrade linux-image-4.15.0-1066-snapdragonUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-1023-azureUpgrade linux-image-4.4.0-1096-awsUpgrade linux-image-4.4.0-166-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1046-gkeUpgrade linux-image-4.15.0-1059-oemUpgrade linux-image-5.0.0-1019-awsUpgrade linux-image-5.0.0-1021-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1023-gkeUpgrade linux-image-4.15.0-66-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1061-azureUpgrade linux-image-5.0.0-1020-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1060-kvmUpgrade linux-image-4.15.0-1052-awsUpgrade linux-image-4.4.0-166-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.0.0-32-lowlatencyUpgrade linux-image-gke-5.0Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1128-snapdragonUpgrade linux-image-4.4.0-166-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1027-oracleUpgrade linux-image-5.0.0-1024-snapdragonUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-gke-4.15Upgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-166-powerpc-e500mcUpgrade linux-image-4.15.0-1049-raspi2Upgrade linux-image-4.4.0-1056-awsUpgrade linux-image-5.0.0-32-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-166-powerpc64-smpUpgrade linux-image-4.4.0-1124-raspi2Upgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-4.15.0-66-generic | Oct 18, 2019 | Sep 20, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub