vulnerability

Oracle Linux: CVE-2019-10126: ELSA-2019-3055: kernel security and bug fix update (IMPORTANT) (Multiple Advisories)

Severity
8
CVSS
(AV:A/AC:L/Au:N/C:C/I:C/A:C)
Published
2019-05-31
Added
2019-10-18
Modified
2024-11-29

Description

A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might lead to memory corruption and possibly other consequences.
A flaw was found in the mwifiex implementation in the Linux kernel. A system connecting to wireless access point could be manipulated by an attacker with advanced permissions on the access point into localized memory corruption or possibly privilege escalation.

Solution

oracle-linux-upgrade-kernel
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.