There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 22, 2020 | Sep 20, 2019 |
| Debian | — | Upgrade linux | Sep 25, 2019 | Sep 20, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade perfUpgrade kernel-debug-develUpgrade kernel | Dec 4, 2019 | Sep 20, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64 | Nov 19, 2019 | Sep 20, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade kernel-headers | Nov 19, 2019 | Sep 20, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade python3-perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-sourceUpgrade kernel-toolsUpgrade bpftoolUpgrade perf | Nov 19, 2019 | Sep 20, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 6, 2020 | Aug 28, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 20, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 22, 2020 | Sep 20, 2019 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-default-extraUpgrade kernel-ec2-develUpgrade kernel-ec2 | Sep 21, 2019 | Sep 20, 2019 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1060-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1124-raspi2Upgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1052-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-gcpUpgrade linux-image-gke-5.0Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-166-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1061-azureUpgrade linux-image-4.4.0-166-powerpc-e500mcUpgrade linux-image-5.0.0-32-generic-lpaeUpgrade linux-image-5.0.0-1024-snapdragonUpgrade linux-image-4.4.0-166-lowlatencyUpgrade linux-image-4.15.0-66-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-32-lowlatencyUpgrade linux-image-5.0.0-1020-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-gkeUpgrade linux-image-4.4.0-166-powerpc64-smpUpgrade linux-image-4.4.0-1128-snapdragonUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1027-oracleUpgrade linux-image-4.15.0-1049-raspi2Upgrade linux-image-4.4.0-1056-awsUpgrade linux-image-oracleUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1096-awsUpgrade linux-image-4.15.0-1059-oemUpgrade linux-image-azureUpgrade linux-image-4.4.0-166-genericUpgrade linux-image-oemUpgrade linux-image-4.15.0-1048-kvmUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.0.0-1023-azureUpgrade linux-image-4.15.0-1046-gkeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.0.0-32-genericUpgrade linux-image-4.15.0-1066-snapdragonUpgrade linux-image-aws-hweUpgrade linux-image-powerpc-smpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1047-gcpUpgrade linux-image-genericUpgrade linux-image-4.15.0-66-lowlatencyUpgrade linux-image-4.15.0-66-generic-lpaeUpgrade linux-image-5.0.0-1019-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-166-powerpc64-embUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.0.0-1020-raspi2Upgrade linux-image-5.0.0-1021-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-166-powerpc-smpUpgrade linux-image-5.0.0-1023-gkeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-hwe-18.04 | Oct 18, 2019 | Sep 20, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub