A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | centos-upgrade-kernelcentos-upgrade-kernel-rt | Feb 5, 2020 | Nov 29, 2019 |
| Debian | debian-upgrade-linux | Jan 20, 2020 | Nov 29, 2019 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-kernelhuawei-euleros-2_0_sp2-upgrade-kernel-debughuawei-euleros-2_0_sp2-upgrade-kernel-debug-develhuawei-euleros-2_0_sp2-upgrade-kernel-debuginfohuawei-euleros-2_0_sp2-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp2-upgrade-kernel-develhuawei-euleros-2_0_sp2-upgrade-kernel-headershuawei-euleros-2_0_sp2-upgrade-kernel-toolshuawei-euleros-2_0_sp2-upgrade-kernel-tools-libshuawei-euleros-2_0_sp2-upgrade-perfhuawei-euleros-2_0_sp2-upgrade-python-perf | Jun 17, 2020 | Nov 29, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-kernelhuawei-euleros-2_0_sp3-upgrade-kernel-debuginfohuawei-euleros-2_0_sp3-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp3-upgrade-kernel-develhuawei-euleros-2_0_sp3-upgrade-kernel-headershuawei-euleros-2_0_sp3-upgrade-kernel-toolshuawei-euleros-2_0_sp3-upgrade-kernel-tools-libshuawei-euleros-2_0_sp3-upgrade-perfhuawei-euleros-2_0_sp3-upgrade-python-perf | Apr 16, 2020 | Nov 29, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-kernelhuawei-euleros-2_0_sp5-upgrade-kernel-develhuawei-euleros-2_0_sp5-upgrade-kernel-headershuawei-euleros-2_0_sp5-upgrade-kernel-toolshuawei-euleros-2_0_sp5-upgrade-kernel-tools-libshuawei-euleros-2_0_sp5-upgrade-perfhuawei-euleros-2_0_sp5-upgrade-python-perf | Feb 24, 2020 | Nov 29, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-bpftoolhuawei-euleros-2_0_sp8-upgrade-kernelhuawei-euleros-2_0_sp8-upgrade-kernel-develhuawei-euleros-2_0_sp8-upgrade-kernel-headershuawei-euleros-2_0_sp8-upgrade-kernel-sourcehuawei-euleros-2_0_sp8-upgrade-kernel-toolshuawei-euleros-2_0_sp8-upgrade-kernel-tools-libshuawei-euleros-2_0_sp8-upgrade-perfhuawei-euleros-2_0_sp8-upgrade-python-perfhuawei-euleros-2_0_sp8-upgrade-python3-perf | Jan 3, 2020 | Nov 29, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-kerneloracle-linux-upgrade-kernel-uek | Feb 6, 2020 | Nov 22, 2019 |
| Redhat Openshift | linuxrpm-upgrade-redhat-coreos | Dec 29, 2020 | Nov 29, 2019 | |
| Redhat_linux | redhat-upgrade-kernelredhat-upgrade-kernel-rt | Feb 5, 2020 | Nov 29, 2019 | |
| Suse | — | suse-upgrade-cluster-md-kmp-defaultsuse-upgrade-cluster-network-kmp-defaultsuse-upgrade-dlm-kmp-defaultsuse-upgrade-gfs2-kmp-defaultsuse-upgrade-kernel-azuresuse-upgrade-kernel-azure-basesuse-upgrade-kernel-azure-develsuse-upgrade-kernel-defaultsuse-upgrade-kernel-default-extrasuse-upgrade-kernel-devel-azuresuse-upgrade-kernel-docssuse-upgrade-kernel-obs-buildsuse-upgrade-kernel-source-azuresuse-upgrade-kernel-syms-azuresuse-upgrade-kgraft-patch-4_4_180-94_103-defaultsuse-upgrade-kgraft-patch-4_4_180-94_107-defaultsuse-upgrade-ocfs2-kmp-default | Dec 13, 2019 | Nov 29, 2019 |
| Ubuntu | ubuntu-upgrade-linux-image-4-15-0-1031-oracleubuntu-upgrade-linux-image-4-15-0-1050-gkeubuntu-upgrade-linux-image-4-15-0-1052-gcpubuntu-upgrade-linux-image-4-15-0-1052-kvmubuntu-upgrade-linux-image-4-15-0-1053-raspi2ubuntu-upgrade-linux-image-4-15-0-1057-awsubuntu-upgrade-linux-image-4-15-0-1066-azureubuntu-upgrade-linux-image-4-15-0-1066-oemubuntu-upgrade-linux-image-4-15-0-1070-snapdragonubuntu-upgrade-linux-image-4-15-0-74-genericubuntu-upgrade-linux-image-4-15-0-74-generic-lpaeubuntu-upgrade-linux-image-4-15-0-74-lowlatencyubuntu-upgrade-linux-image-4-4-0-1060-awsubuntu-upgrade-linux-image-4-4-0-1064-kvmubuntu-upgrade-linux-image-4-4-0-1100-awsubuntu-upgrade-linux-image-4-4-0-1127-raspi2ubuntu-upgrade-linux-image-4-4-0-1131-snapdragonubuntu-upgrade-linux-image-4-4-0-171-genericubuntu-upgrade-linux-image-4-4-0-171-generic-lpaeubuntu-upgrade-linux-image-4-4-0-171-lowlatencyubuntu-upgrade-linux-image-4-4-0-171-powerpc-e500mcubuntu-upgrade-linux-image-4-4-0-171-powerpc-smpubuntu-upgrade-linux-image-4-4-0-171-powerpc64-embubuntu-upgrade-linux-image-4-4-0-171-powerpc64-smpubuntu-upgrade-linux-image-5-0-0-1009-oracleubuntu-upgrade-linux-image-5-0-0-1023-awsubuntu-upgrade-linux-image-5-0-0-1024-kvmubuntu-upgrade-linux-image-5-0-0-1024-raspi2ubuntu-upgrade-linux-image-5-0-0-1027-gkeubuntu-upgrade-linux-image-5-0-0-1028-azureubuntu-upgrade-linux-image-5-0-0-1028-gcpubuntu-upgrade-linux-image-5-0-0-1033-oem-osp1ubuntu-upgrade-linux-image-5-0-0-38-genericubuntu-upgrade-linux-image-5-0-0-38-generic-lpaeubuntu-upgrade-linux-image-5-0-0-38-lowlatencyubuntu-upgrade-linux-image-5-3-0-1008-oracleubuntu-upgrade-linux-image-5-3-0-1009-awsubuntu-upgrade-linux-image-5-3-0-1009-azureubuntu-upgrade-linux-image-5-3-0-1009-kvmubuntu-upgrade-linux-image-5-3-0-1010-gcpubuntu-upgrade-linux-image-5-3-0-1011-gcpubuntu-upgrade-linux-image-5-3-0-1015-raspi2ubuntu-upgrade-linux-image-5-3-0-26-genericubuntu-upgrade-linux-image-5-3-0-26-generic-lpaeubuntu-upgrade-linux-image-5-3-0-26-lowlatencyubuntu-upgrade-linux-image-5-3-0-26-snapdragonubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-aws-edgeubuntu-upgrade-linux-image-aws-hweubuntu-upgrade-linux-image-aws-lts-18-04ubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-azure-edgeubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-gcp-edgeubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-hwe-18-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-16-04ubuntu-upgrade-linux-image-generic-lpae-hwe-18-04ubuntu-upgrade-linux-image-generic-lpae-lts-xenialubuntu-upgrade-linux-image-generic-lts-xenialubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-gke-4-15ubuntu-upgrade-linux-image-gke-5-0ubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-lowlatency-hwe-18-04ubuntu-upgrade-linux-image-lowlatency-lts-xenialubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-oem-osp1ubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-oracle-edgeubuntu-upgrade-linux-image-oracle-lts-18-04ubuntu-upgrade-linux-image-powerpc-e500mcubuntu-upgrade-linux-image-powerpc-e500mc-lts-xenialubuntu-upgrade-linux-image-powerpc-smpubuntu-upgrade-linux-image-powerpc-smp-lts-xenialubuntu-upgrade-linux-image-powerpc64-embubuntu-upgrade-linux-image-powerpc64-emb-lts-xenialubuntu-upgrade-linux-image-powerpc64-smpubuntu-upgrade-linux-image-powerpc64-smp-lts-xenialubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragonubuntu-upgrade-linux-image-snapdragon-hwe-18-04ubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-hwe-16-04ubuntu-upgrade-linux-image-virtual-hwe-18-04ubuntu-upgrade-linux-image-virtual-lts-xenial | Jan 8, 2020 | Nov 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub