A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Feb 5, 2020 | Nov 29, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Nov 29, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-debugUpgrade perfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-tools-libs | Jun 17, 2020 | Nov 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo | Apr 16, 2020 | Nov 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf | Feb 24, 2020 | Nov 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-sourceUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade python3-perf | Jan 3, 2020 | Nov 29, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 6, 2020 | Nov 22, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Nov 29, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Feb 5, 2020 | Nov 29, 2019 |
| Suse | — | Upgrade kgraft-patch-4_4_180-94_103-defaultUpgrade kernel-azureUpgrade kernel-azure-develUpgrade gfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade ocfs2-kmp-defaultUpgrade kgraft-patch-4_4_180-94_107-defaultUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade cluster-network-kmp-defaultUpgrade kernel-default | Dec 13, 2019 | Nov 29, 2019 |
| Ubuntu | — | Upgrade linux-image-oracle-edgeUpgrade linux-image-raspi2Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.3.0-1009-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1052-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-4.4.0-171-powerpc-smpUpgrade linux-image-azure-edgeUpgrade linux-image-5.3.0-26-generic-lpaeUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-4.4.0-171-generic-lpaeUpgrade linux-image-gcp-edgeUpgrade linux-image-gke-4.15Upgrade linux-image-aws-hweUpgrade linux-image-5.3.0-26-lowlatencyUpgrade linux-image-5.3.0-1011-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-171-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-5.3.0-1010-gcpUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-4.4.0-171-powerpc-e500mcUpgrade linux-image-4.15.0-1057-awsUpgrade linux-image-4.15.0-1052-kvmUpgrade linux-image-5.3.0-1009-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.0.0-1023-awsUpgrade linux-image-5.3.0-26-genericUpgrade linux-image-4.15.0-74-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-5.3.0-1015-raspi2Upgrade linux-image-5.3.0-26-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1053-raspi2Upgrade linux-image-genericUpgrade linux-image-4.4.0-1100-awsUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-4.4.0-1131-snapdragonUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-4.15.0-1066-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1127-raspi2Upgrade linux-image-5.0.0-1028-azureUpgrade linux-image-gkeUpgrade linux-image-aws-edgeUpgrade linux-image-4.15.0-74-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1031-oracleUpgrade linux-image-4.4.0-1064-kvmUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1066-oemUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-5.3.0-1008-oracleUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-171-powerpc64-embUpgrade linux-image-powerpc64-smpUpgrade linux-image-oem-osp1Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-171-powerpc64-smpUpgrade linux-image-4.15.0-1050-gkeUpgrade linux-image-4.15.0-74-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1070-snapdragonUpgrade linux-image-4.4.0-1060-aws | Jan 8, 2020 | Nov 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub