A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Feb 5, 2020 | Nov 29, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Nov 29, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debug | Jun 17, 2020 | Nov 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Apr 16, 2020 | Nov 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-headersUpgrade perfUpgrade python-perf | Feb 24, 2020 | Nov 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade python3-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel | Jan 3, 2020 | Nov 29, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 6, 2020 | Nov 22, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Nov 29, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Feb 5, 2020 | Nov 29, 2019 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade kgraft-patch-4_4_180-94_107-defaultUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade cluster-network-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kgraft-patch-4_4_180-94_103-defaultUpgrade kernel-devel-azureUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-azure | Dec 13, 2019 | Nov 29, 2019 |
| Ubuntu | — | Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-74-genericUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-4.15.0-1066-azureUpgrade linux-image-4.15.0-1053-raspi2Upgrade linux-image-5.3.0-1011-gcpUpgrade linux-image-aws-edgeUpgrade linux-image-4.4.0-1127-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-4.4.0-171-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.0.0-1023-awsUpgrade linux-image-4.4.0-171-powerpc-e500mcUpgrade linux-image-4.15.0-1057-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.3.0-26-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-oemUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-74-generic-lpaeUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.0.0-1028-azureUpgrade linux-image-4.15.0-1031-oracleUpgrade linux-image-gcp-edgeUpgrade linux-image-genericUpgrade linux-image-5.3.0-1010-gcpUpgrade linux-image-aws-hweUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-5.3.0-26-lowlatencyUpgrade linux-image-4.4.0-1064-kvmUpgrade linux-image-4.4.0-1100-awsUpgrade linux-image-4.4.0-1131-snapdragonUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1052-kvmUpgrade linux-image-5.3.0-1009-kvmUpgrade linux-image-awsUpgrade linux-image-4.15.0-1052-gcpUpgrade linux-image-4.4.0-171-powerpc-smpUpgrade linux-image-snapdragonUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-azure-edgeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-smpUpgrade linux-image-5.3.0-1008-oracleUpgrade linux-image-5.3.0-26-snapdragonUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.3.0-1009-awsUpgrade linux-image-kvmUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-4.4.0-171-lowlatencyUpgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-4.15.0-1050-gkeUpgrade linux-image-5.3.0-1015-raspi2Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1070-snapdragonUpgrade linux-image-4.4.0-171-powerpc64-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1066-oemUpgrade linux-image-4.4.0-171-powerpc64-embUpgrade linux-image-5.0.0-38-genericUpgrade linux-image-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-171-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-oem-osp1Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.3.0-1009-azureUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-74-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.3.0-26-generic-lpaeUpgrade linux-image-4.4.0-1060-awsUpgrade linux-image-gke-5.0Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-oracle-edgeUpgrade linux-image-5.0.0-1009-oracle | Jan 8, 2020 | Nov 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub