A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Feb 5, 2020 | Nov 29, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Nov 29, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade perfUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf | Jun 17, 2020 | Nov 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs | Apr 16, 2020 | Nov 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel | Feb 24, 2020 | Nov 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-sourceUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-headersUpgrade python3-perfUpgrade python-perfUpgrade kernel-tools | Jan 3, 2020 | Nov 29, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 6, 2020 | Nov 22, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Nov 29, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Feb 5, 2020 | Nov 29, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade kgraft-patch-4_4_180-94_107-defaultUpgrade kernel-azure-baseUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade cluster-network-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kgraft-patch-4_4_180-94_103-defaultUpgrade kernel-devel-azureUpgrade ocfs2-kmp-default | Dec 13, 2019 | Nov 29, 2019 |
| Ubuntu | — | Upgrade linux-image-4.4.0-171-genericUpgrade linux-image-lowlatencyUpgrade linux-image-gke-4.15Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1070-snapdragonUpgrade linux-image-4.15.0-1057-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-4.15.0-1066-oemUpgrade linux-image-azure-edgeUpgrade linux-image-5.3.0-1009-azureUpgrade linux-image-4.15.0-1052-gcpUpgrade linux-image-raspi2Upgrade linux-image-5.3.0-26-generic-lpaeUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-4.4.0-1060-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azureUpgrade linux-image-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.0.0-38-genericUpgrade linux-image-gke-5.0Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-oem-osp1Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.3.0-1009-awsUpgrade linux-image-4.4.0-171-lowlatencyUpgrade linux-image-4.4.0-171-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-4.4.0-171-powerpc64-embUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-4.15.0-1050-gkeUpgrade linux-image-5.3.0-26-snapdragonUpgrade linux-image-oracle-edgeUpgrade linux-image-4.4.0-171-powerpc-smpUpgrade linux-image-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-74-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.3.0-1015-raspi2Upgrade linux-image-5.3.0-1008-oracleUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-4.4.0-171-powerpc64-smpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.3.0-1009-kvmUpgrade linux-image-gcp-edgeUpgrade linux-image-5.3.0-1010-gcpUpgrade linux-image-oemUpgrade linux-image-4.4.0-1127-raspi2Upgrade linux-image-gke | Jan 8, 2020 | Nov 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub